2025-05-03 00:00:00
mitre
PUBLISHED
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.