Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-x39x-9qw5-ghrfBrowser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URLAlso filed as CVE-2025-47241, PYSEC-2026-300 critical Not flagged May 5, 2025

Versions in the registry

0.13.11 (listed), 0.13.5