# com.browser-use/browser-use

> Control a real Chrome browser to complete any task: fill forms, extract data, book flights.

- name: com.browser-use/browser-use
- version: 0.13.5
- connection class: L0 (run_local_package)
- trust: 90/100
- quality: –/100 (not scored)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.browser-use%2Fbrowser-use
- tools: https://api.protogrid.dev/v1/servers/com.browser-use%2Fbrowser-use/tools

**Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "browser-use": {
      "command": "uvx",
      "args": [
        "browser-use==0.13.5",
        "--cli-mcp"
      ]
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: n/a
- freshness: 65
- provenance: 100
- drivers: +repository +namespace-matches-repo +dns-namespace +website ~liveness-unmeasured ~updated-95d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality –/100 (not scored)

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

### protocol: n/a (weight 25)

- n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only)

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: n/a (weight 30)

- n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty)

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool list unknown

### dependencies: 33 (weight 15)

- fail `deps.known_vulns`: 24 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in aiohttp@3.13.4 (direct, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in aiohttp@3.13.4 (direct, fixed in 3.14.4), GHSA-cq5v-8q36-5273 in aiohttp@3.13.4 (direct, fixed in 3.14.3), ...; 37 more of lower severity or without a fix
- fail `deps.mcp_sdk_version`: mcp 1.26.0 has 4 known advisories (GHSA-84m7-p3x7-pcfv, GHSA-hvrp-rf83-w775, GHSA-jpw9-pfvf-9f58, ...); update mcp to 1.30.0 or later
- pass `deps.resolvable`: browser-use@0.13.5 resolved: 100 packages

- tools: unknown
- badge: [![protogrid quality](https://protogrid.dev/badge/com.browser-use/browser-use.svg)](https://protogrid.dev/servers/com.browser-use/browser-use)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- pypi browser-use@0.13.5: resolved, 99 dependencies, MCP SDK mcp 1.26.0
  - GHSA-82r6-8w77-94w6 (critical) in `` anyio@4.12.1 ``, direct, fixed in `` 4.14.2 ``, advisory summary: "AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing" https://osv.dev/vulnerability/GHSA-82r6-8w77-94w6
  - GHSA-2g87-pp6c-29x5 (high) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp: Multiple instances of excessive or unbounded memory/CPU use" https://osv.dev/vulnerability/GHSA-2g87-pp6c-29x5
  - GHSA-5wr8-gcqf-gqf3 (high) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp server lacks an initial request/header timeout" https://osv.dev/vulnerability/GHSA-5wr8-gcqf-gqf3
  - GHSA-cq5v-8q36-5273 (high) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.3 ``, advisory summary: "AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)" https://osv.dev/vulnerability/GHSA-cq5v-8q36-5273
  - GHSA-hvrp-rf83-w775 (high) in `` mcp@1.26.0 ``, direct, fixed in `` 1.27.2 ``, advisory summary: "MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks" https://osv.dev/vulnerability/GHSA-hvrp-rf83-w775
  - GHSA-jpw9-pfvf-9f58 (high) in `` mcp@1.26.0 ``, direct, fixed in `` 1.27.2 ``, advisory summary: "MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal" https://osv.dev/vulnerability/GHSA-jpw9-pfvf-9f58
  - GHSA-vj7q-gjh5-988w (high) in `` mcp@1.26.0 ``, direct, fixed in `` 1.28.1 ``, advisory summary: "MCP Python SDK: WebSocket server transport does not support Host/Origin validation" https://osv.dev/vulnerability/GHSA-vj7q-gjh5-988w
  - GHSA-45hq-cxwh-f6vc (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow \`BdfFontFile\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via font loading" https://osv.dev/vulnerability/GHSA-45hq-cxwh-f6vc
  - GHSA-5x94-69rx-g8h2 (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: \`FontFile.compile()\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\`" https://osv.dev/vulnerability/GHSA-5x94-69rx-g8h2
  - GHSA-62p4-gmf7-7g93 (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)" https://osv.dev/vulnerability/GHSA-62p4-gmf7-7g93
  - GHSA-6r8x-57c9-28j4 (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: Heap out-of-bounds write \`Image.paste()\` / \`Image.crop()\` via signed coordinate overflow" https://osv.dev/vulnerability/GHSA-6r8x-57c9-28j4
  - GHSA-8v84-f9pq-wr9x (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow \`PcfFontFile.\_load\_bitmaps()\`: \`Image.frombytes()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via PCF font loading" https://osv.dev/vulnerability/GHSA-8v84-f9pq-wr9x
  - GHSA-9hw9-ch79-4vh6 (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: Controlled heap out-of-bounds write in Pillow \`ImageCmsTransform.apply()\` via output mode mismatch" https://osv.dev/vulnerability/GHSA-9hw9-ch79-4vh6
  - GHSA-jjj6-mw9f-p565 (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()" https://osv.dev/vulnerability/GHSA-jjj6-mw9f-p565
  - GHSA-phj9-mv4w-65pm (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow \`GdImageFile.\_open()\`: image dimensions accepted without \`\_decompression\_bomb\_check()\`" https://osv.dev/vulnerability/GHSA-phj9-mv4w-65pm
  - GHSA-vjc4-5qp5-m44j (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service" https://osv.dev/vulnerability/GHSA-vjc4-5qp5-m44j
  - GHSA-xj96-63gp-2gmr (high) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: Heap out-of-bounds write in \`ImageFilter.RankFilter\` via integer overflow in \`ImagingExpand\`" https://osv.dev/vulnerability/GHSA-xj96-63gp-2gmr
  - GHSA-5jq2-8x83-x246 (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.18.0 ``, advisory summary: "pypdf: Possible long runtimes/large memory usage when parsing indirect objects" https://osv.dev/vulnerability/GHSA-5jq2-8x83-x246
  - GHSA-5xf7-4p34-54qr (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.14.1 ``, advisory summary: "pypdf: Possible infinite loop for not terminated inline images" https://osv.dev/vulnerability/GHSA-5xf7-4p34-54qr
  - GHSA-fp3h-c4fm-7vvf (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.18.1 ``, advisory summary: "pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)" https://osv.dev/vulnerability/GHSA-fp3h-c4fm-7vvf
  - GHSA-g867-7843-wf8q (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.14.2 ``, advisory summary: "pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)" https://osv.dev/vulnerability/GHSA-g867-7843-wf8q
  - GHSA-g9cg-prrw-2r8q (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.18.1 ``, advisory summary: "pypdf: Possible large memory usage when parsing font data" https://osv.dev/vulnerability/GHSA-g9cg-prrw-2r8q
  - GHSA-jw7q-gvrg-4vj3 (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.18.1 ``, advisory summary: "pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)" https://osv.dev/vulnerability/GHSA-jw7q-gvrg-4vj3
  - GHSA-php9-fj8v-98fj (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.19.0 ``, advisory summary: "pypdf: Possible long runtimes when generating appearance streams" https://osv.dev/vulnerability/GHSA-php9-fj8v-98fj
  - GHSA-qv6h-rv94-w285 (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.17.0 ``, advisory summary: "pypdf: Possible large memory usage when retrieving Roman page labels" https://osv.dev/vulnerability/GHSA-qv6h-rv94-w285
  - GHSA-v247-6f48-mgcj (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.19.0 ``, advisory summary: "pypdf: Possible long runtimes with large amount of embedded files" https://osv.dev/vulnerability/GHSA-v247-6f48-mgcj
  - GHSA-w23x-9jrw-r45c (high) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.19.0 ``, advisory summary: "pypdf: Possible large memory usage when retrieving alphabetical page labels" https://osv.dev/vulnerability/GHSA-w23x-9jrw-r45c
  - GHSA-4fvr-rgm6-gqmc (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: HTTP/1 Pipelined Requests Queue Without Limit" https://osv.dev/vulnerability/GHSA-4fvr-rgm6-gqmc
  - GHSA-63hw-fmq6-xxg2 (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: C HTTP Parser Bypasses max\_line\_size for Fragmented Lines" https://osv.dev/vulnerability/GHSA-63hw-fmq6-xxg2
  - GHSA-g3cq-j2xw-wf74 (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Unread Compressed Request Bodies Bypass client\_max\_size During Cleanup" https://osv.dev/vulnerability/GHSA-g3cq-j2xw-wf74
  - GHSA-hg6j-4rv6-33pg (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "AIOHTTP is vulnerable to cross-origin redirect with per-request cookies" https://osv.dev/vulnerability/GHSA-hg6j-4rv6-33pg
  - GHSA-hpj7-wq8m-9hgp (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges" https://osv.dev/vulnerability/GHSA-hpj7-wq8m-9hgp
  - GHSA-jg22-mg44-37j8 (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "AIOHTTP is Vulnerable to Deserialization of Untrusted Data" https://osv.dev/vulnerability/GHSA-jg22-mg44-37j8
  - GHSA-mfx4-hv73-q22v (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.2 ``, advisory summary: "AIOHTTP: HTTP request smuggling via WebSocket upgrade" https://osv.dev/vulnerability/GHSA-mfx4-hv73-q22v
  - GHSA-mq44-7p77-q5h7 (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.2 ``, advisory summary: "AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate" https://osv.dev/vulnerability/GHSA-mq44-7p77-q5h7
  - GHSA-xcgm-r5h9-7989 (moderate) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Incomplete websocket frame payloads bypass memory limits" https://osv.dev/vulnerability/GHSA-xcgm-r5h9-7989
  - GHSA-5p39-cfhj-2xmp (moderate) in `` anyio@4.12.1 ``, direct, fixed in `` 4.14.2 ``, advisory summary: "AnyIO process-pool workers can block indefinitely on undrained stderr" https://osv.dev/vulnerability/GHSA-5p39-cfhj-2xmp
  - GHSA-84m7-p3x7-pcfv (moderate) in `` mcp@1.26.0 ``, direct, fixed in `` 1.30.0 ``, advisory summary: "MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion" https://osv.dev/vulnerability/GHSA-84m7-p3x7-pcfv
  - GHSA-hj66-6f7g-4r5v (moderate) in `` oauthlib@3.3.1 ``, indirect, fixed in `` 4.0.0 ``, advisory summary: "Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation" https://osv.dev/vulnerability/GHSA-hj66-6f7g-4r5v
  - GHSA-xpv3-w29h-x7cv (moderate) in `` oauthlib@3.3.1 ``, indirect, fixed in `` 4.0.0 ``, advisory summary: "Oauthlib: Timing Attack Vulnerability in PKCE code\_verifier Comparison (CWE-208)" https://osv.dev/vulnerability/GHSA-xpv3-w29h-x7cv
  - GHSA-4x4j-2g7c-83w6 (moderate) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow: WindowsViewer.get\_command() OS command injection via unescaped shell path" https://osv.dev/vulnerability/GHSA-4x4j-2g7c-83w6
  - GHSA-fj7v-r99m-22gq (moderate) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images" https://osv.dev/vulnerability/GHSA-fj7v-r99m-22gq
  - GHSA-pg7v-jwj7-p798 (moderate) in `` pillow@12.2.0 ``, direct, fixed in `` 12.3.0 ``, advisory summary: "Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service" https://osv.dev/vulnerability/GHSA-pg7v-jwj7-p798
  - GHSA-23w6-3w8w-8484 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.16.1 ``, advisory summary: "pypdf: Possible long runtimes/large memory usage when retrieving outlines" https://osv.dev/vulnerability/GHSA-23w6-3w8w-8484
  - GHSA-248m-82v9-q6g6 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.12.0 ``, advisory summary: "pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams" https://osv.dev/vulnerability/GHSA-248m-82v9-q6g6
  - GHSA-52x6-gq3r-vpf4 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.13.0 ``, advisory summary: "pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction" https://osv.dev/vulnerability/GHSA-52x6-gq3r-vpf4
  - GHSA-55h5-xmcq-c37v (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.14.0 ``, advisory summary: "pypdf: Possible long runtimes for repeated malformed cross-reference entries" https://osv.dev/vulnerability/GHSA-55h5-xmcq-c37v
  - GHSA-5hgr-hg42-57jg (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.12.2 ``, advisory summary: "pypdf: Inefficient decoding of FlateDecode PNG predictor streams" https://osv.dev/vulnerability/GHSA-5hgr-hg42-57jg
  - GHSA-5qjq-93h5-hrgp (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.14.0 ``, advisory summary: "pypdf: Possible large memory usage for wrong image dimensions" https://osv.dev/vulnerability/GHSA-5qjq-93h5-hrgp
  - GHSA-763m-79hh-57f2 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.16.1 ``, advisory summary: "pypdf: Possible long runtimes/large memory usage when extracting XForm objects" https://osv.dev/vulnerability/GHSA-763m-79hh-57f2
  - GHSA-cj93-chg6-vgv8 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.12.0 ``, advisory summary: "pypdf: Possible large memory usage for large offsets for layout mode text" https://osv.dev/vulnerability/GHSA-cj93-chg6-vgv8
  - GHSA-fc8x-2rww-xw9m (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.15.0 ``, advisory summary: "pypdf: Inefficient handling of non-whitespace inputs in read\_until\_whitespace" https://osv.dev/vulnerability/GHSA-fc8x-2rww-xw9m
  - GHSA-fp3f-mc75-235c (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.15.0 ``, advisory summary: "pypdf: Possible large memory usage for large /ToUnicode streams" https://osv.dev/vulnerability/GHSA-fp3f-mc75-235c
  - GHSA-fwg2-594c-jp42 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.15.0 ``, advisory summary: "pypdf: Possible long runtimes/large memory usage for large CID font width ranges" https://osv.dev/vulnerability/GHSA-fwg2-594c-jp42
  - GHSA-g9xf-7f8q-9mcj (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.13.1 ``, advisory summary: "pypdf: Possible infinite loop when processing threads/articles in writer" https://osv.dev/vulnerability/GHSA-g9xf-7f8q-9mcj
  - GHSA-j543-4vmf-qm7v (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.12.2 ``, advisory summary: "pypdf: Possible large memory usage for form XObjects during text extraction" https://osv.dev/vulnerability/GHSA-j543-4vmf-qm7v
  - GHSA-jm82-fx9c-mx94 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.13.3 ``, advisory summary: "pypdf: Missing stream length values ignore defined limits" https://osv.dev/vulnerability/GHSA-jm82-fx9c-mx94
  - GHSA-jp53-mhqp-8xcg (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.16.0 ``, advisory summary: "pypdf: Possible infinite loop for TreeObject.insert\_child" https://osv.dev/vulnerability/GHSA-jp53-mhqp-8xcg
  - GHSA-m2v9-299j-rv96 (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.13.0 ``, advisory summary: "pypdf: Possible infinite loop when processing outlines/bookmarks in writer" https://osv.dev/vulnerability/GHSA-m2v9-299j-rv96
  - GHSA-wjqc-6w8f-h24c (moderate) in `` pypdf@6.10.2 ``, direct, fixed in `` 6.12.1 ``, advisory summary: "pypdf: Manipulated XMP metadata streams can exhaust RAM" https://osv.dev/vulnerability/GHSA-wjqc-6w8f-h24c
  - GHSA-2fqr-mr3j-6wp8 (low) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence" https://osv.dev/vulnerability/GHSA-2fqr-mr3j-6wp8
  - GHSA-494j-54xm-rwp3 (low) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "AIOHTTP: Secure attribute not enforced for shared cookie" https://osv.dev/vulnerability/GHSA-494j-54xm-rwp3
  - GHSA-4m7w-qmgq-4wj5 (low) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections" https://osv.dev/vulnerability/GHSA-4m7w-qmgq-4wj5
  - GHSA-9x8q-7h8h-wcw9 (low) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect" https://osv.dev/vulnerability/GHSA-9x8q-7h8h-wcw9
  - GHSA-m6qw-4cw2-hm4m (low) in `` aiohttp@3.13.4 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "aiohttp: CRLF injection in multipart headers" https://osv.dev/vulnerability/GHSA-m6qw-4cw2-hm4m

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

_none_

## Packages

- pypi browser-use@0.13.5

## Tools (0)

_none observed_