steel-dev/steel-browser

steel-dev/steel-browser

GitHubGitHub
GitHubgithub.com
steel.devsteel.dev
Releases23
Frequency3 weeks 2 days
Last Release
Stars7.12K
🔥 Open Source Browser API for AI Agents & Apps. Steel Browser is a batteries-included browser sandbox that lets you automate the web without worrying about infrastructure.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-6152↗
6.3 MEDIUM6.5 MEDIUM

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The patch is named 7ba93a10000fb77ee01731478ef40551a27bd5b9. It is recommended to apply a patch to fix this issue.