CVE-2021-22929

6.1 mediumEPSS 0.6%

Medium (6.1) in brave brave. EPSS 0.6% chance of exploitation in the next 30 days.

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-11-01)
CWEs: CWE-532, CWE-312
Published: 2021-08-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

brave:brave

References

https://hackerone.com/reports/1249056
https://hackerone.com/reports/1249056

Check your stack JSON