Skip to content

Security: usebruno/bruno

Security

security.md

Security

At Bruno, we take security seriously and are committed to providing a safe experience for all users.
We appreciate responsible disclosure and value contributions that help improve Bruno's security.

Reporting a Vulnerability

To report a security issue, please email us at [email protected]

When reporting a vulnerability, please include as many details as possible to help us investigate:

  • Type of issue (e.g., cross-site scripting, malicious npm package, etc.).
  • Full paths of source file(s) related to the issue.
  • Location of affected code (tag, branch, commit, or direct URL).
  • Any special configuration required to reproduce the issue.
  • Step-by-step instructions to reproduce the issue.
  • Proof-of-concept or exploit code (if available).
  • Potential impact, including how an attacker might exploit the issue.

Please do not report security vulnerabilities through public GitHub issues.

Learn more about advisories related to usebruno/bruno in the GitHub Advisory Database