Please report security vulnerabilities here
Security: zen-browser/desktop
Security
SECURITY.md
-
Zen Browser - Missing Fullscreen Security Notification Allows Origin SpoofingGHSA-vjfv-85qf-v25c published
May 13, 2026 by mr-cheffyHigh -
Address Bar Spoofing via Long SubdomainGHSA-7p2r-fp29-9w69 published
May 8, 2026 by mr-cheffyModerate -
RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab CreationGHSA-cc9c-mmmf-c5j6 published
May 8, 2026 by mr-cheffyLow -
Zen Browser MAR updater ships with signature verification removed — unsigned updates acceptedGHSA-qpj9-m8jc-mw6q published
Apr 24, 2026 by mr-cheffyHigh
Learn more about advisories related to zen-browser/desktop in the GitHub Advisory Database