Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2020-8276

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. The intended behavior was to log the timestamp for incognito windows excluding Tor windows. Note that if a user has P3A enabled, the timestamp is not sent to Brave's server, but rather a value from:Used in last 24hUsed in last week but not 24hUsed in last 28 days but not weekEver used but not in last 28 daysNever usedThe privacy risk is low because a local attacker with disk access cannot tell if the timestamp corresponds to a Tor window or a non-Tor incognito window.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2020-8276
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 07:05 UTC · Revision 1

Source evidence

CVE-2020-8276

core-osv · Original source

Published 9 Nov 2020, 15:15 UTC

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. The intended behavior was to log the timestamp for incognito windows excluding Tor windows. Note that if a user has P3A enabled, the timestamp is not sent to Brave's server, but rather a value from:Used in last 24hUsed in last week but not 24hUsed in last 28 days but not weekEver used but not in last 28 daysNever usedThe privacy risk is low because a local attacker with disk access cannot tell if the timestamp corresponds to a Tor window or a non-Tor incognito window.

osv:CVE-2020-8276
Complete source record
{
  "id": "88a2839e73d594c0accd7fc4ac9e44c925b3a81793cad10c4c0889c452c7a867",
  "url": "https://osv.dev/vulnerability/CVE-2020-8276",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2020-8276",
    "summary": "The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. The intended behavior was to log the timestamp for incognito windows excluding Tor windows. Note that if a user has P3A enabled, the timestamp is not sent to Brave's server, but rather a value from:Used in last 24hUsed in last week but not 24hUsed in last 28 days but not weekEver used but not in last 28 daysNever usedThe privacy risk is low because a local attacker with disk access cannot tell if the timestamp corresponds to a Tor window or a non-Tor incognito window.",
    "evidence": "osv:CVE-2020-8276",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2020-8276",
      "aliases": [
        "CVE-2020-8276"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/brave/brave-browser",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "450c1fc3f6836711b1788b32729ce9b14ab95104"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "1.1"
                      },
                      {
                        "last_affected": "1.18.35"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.18.35",
            "v1.5.100b",
            "v1.5.97b",
            "v1.5.90b",
            "v1.5.89b",
            "v1.5.59b",
            "v1.5.58b",
            "v0.55.5",
            "v0.55.4",
            "v0.55.3",
            "v0.55.2",
            "v0.55.1",
            "v0.54.4",
            "dev-latest",
            "v0.54.3",
            "v0.54.2",
            "v0.54.1",
            "v0.54.0",
            "v0.50.14",
            "v0.50.13"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8276.json"
          }
        },
        {
          "ranges": [
            {
              "repo": "https://github.com/brave/brave-core",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "c967ad89d9546a336a952638c96bdc220e2142bb"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "1.1"
                      },
                      {
                        "last_affected": "1.18.35"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.12.67",
            "v1.18.35",
            "v1.18.34",
            "v1.18.33",
            "v1.18.32",
            "v1.18.31",
            "v1.18.30",
            "v1.18.29",
            "v1.18.28",
            "v1.18.27",
            "v1.18.26",
            "v1.18.25",
            "v1.18.24",
            "v1.18.23",
            "v1.18.22",
            "v1.18.21",
            "v1.18.20",
            "v1.18.19",
            "v1.18.18",
            "v1.18.17",
            "v1.18.16",
            "v1.18.15",
            "v1.18.14",
            "v1.18.13",
            "v1.18.10",
            "v1.18.11",
            "v1.18.12",
            "v1.18.9",
            "v1.18.8",
            "v1.18.7",
            "v1.18.6",
            "v1.18.5",
            "v1.18.4",
            "v1.18.3",
            "v1.18.2",
            "v1.18.1",
            "v1.17.44",
            "v1.17.43",
            "v1.17.36",
            "v1.17.42",
            "v1.17.41",
            "v1.17.40",
            "v1.17.39",
            "v1.17.38",
            "v1.17.37",
            "v1.17.35",
            "v1.17.34",
            "v1.17.33",
            "v1.17.32",
            "v1.17.31",
            "v1.17.30",
            "v1.17.29",
            "v1.17.28",
            "v1.17.27",
            "v1.17.26",
            "v1.17.22",
            "v1.17.25",
            "v1.17.24",
            "v1.17.23",
            "v1.17.21",
            "v1.17.20",
            "v1.17.19",
            "v1.17.18",
            "v1.17.17",
            "v1.17.16",
            "v1.17.15",
            "v1.17.14",
            "v1.17.13",
            "v1.17.12",
            "v1.17.11",
            "v1.17.10",
            "v1.17.9",
            "v1.17.8",
            "v1.17.7",
            "v1.17.6",
            "v1.17.5",
            "v1.17.4",
            "v1.17.3",
            "v1.17.2",
            "v1.17.1",
            "v1.16.46",
            "v1.16.45",
            "v1.16.42",
            "v1.16.44",
            "v1.16.43",
            "v1.16.41",
            "v1.16.40",
            "v1.16.39",
            "v1.16.38",
            "v1.16.37",
            "v1.16.36",
            "v1.16.35",
            "v1.16.34",
            "v1.16.33",
            "v1.16.32",
            "v1.16.31",
            "v1.16.30",
            "v1.16.29",
            "v1.16.28",
            "v1.16.27",
            "v1.16.26",
            "v1.16.22",
            "v1.16.25",
            "v1.16.24",
            "v1.16.23",
            "v1.16.18",
            "v1.16.17",
            "v1.16.21",
            "v1.16.20",
            "v1.16.19",
            "v1.16.16",
            "v1.16.14",
            "v1.16.15",
            "v1.16.13",
            "v1.16.12",
            "v1.16.10",
            "v1.16.11",
            "v1.16.9",
            "v1.16.8",
            "v1.16.7",
            "v1.16.6",
            "v1.16.5",
            "v1.16.4",
            "v1.15.44",
            "v1.16.3",
            "v1.16.2",
            "v1.16.1",
            "v1.15.43",
            "v1.15.42",
            "v1.15.41",
            "v1.15.40",
            "v1.15.39",
            "v1.15.38",
            "v1.15.37",
            "v1.15.36",
            "v1.15.35",
            "v1.15.34",
            "v1.15.33",
            "v1.15.32",
            "v1.15.31",
            "v1.15.30",
            "v1.15.29",
            "v1.15.28",
            "v1.15.27",
            "v1.15.26",
            "v1.15.25",
            "v1.15.22",
            "v1.15.24",
            "v1.15.23",
            "v1.15.21",
            "v1.15.20",
            "v1.15.19",
            "v1.15.18",
            "v1.15.17",
            "v1.15.16",
            "v1.15.13",
            "v1.15.15",
            "v1.15.14",
            "v1.15.12",
            "v1.15.11",
            "v1.15.10",
            "v1.15.9",
            "v1.15.8",
            "v1.15.7",
            "v1.15.6",
            "v1.15.5",
            "v1.15.4",
            "v1.15.3",
            "v1.15.2",
            "v1.15.1",
            "v1.14.58",
            "v1.14.57",
            "v1.14.56",
            "v1.14.55",
            "v1.14.54",
            "v1.14.53",
            "v1.14.52",
            "v1.14.51",
            "v1.14.50",
            "v1.14.49",
            "v1.14.48",
            "v1.14.47",
            "v1.14.46",
            "v1.14.45",
            "v1.14.44",
            "v1.14.43",
            "v1.14.42",
            "v1.14.41",
            "v1.14.40",
            "v1.14.39",
            "v1.14.36",
            "v1.14.38",
            "v1.14.37",
            "v1.14.35",
            "v1.14.34",
            "v1.14.33",
            "v1.14.32",
            "v1.14.31",
            "v1.14.30",
            "v1.14.29",
            "v1.14.28",
            "v1.14.27",
            "v1.14.26",
            "v1.14.25",
            "v1.14.24",
            "v1.14.23",
            "v1.14.22",
            "v1.14.21",
            "v1.14.20",
            "v1.14.19",
            "v1.14.18",
            "v1.14.17",
            "v1.14.16",
            "v1.14.15",
            "v1.14.14",
            "v1.14.13",
            "v1.14.12",
            "v1.14.11",
            "v1.14.10",
            "v1.14.9",
            "v1.14.8",
            "v1.13.8",
            "v1.14.7",
            "v1.14.6",
            "v1.14.5",
            "v1.14.1",
            "v1.14.4",
            "v1.14.3",
            "v1.14.2",
            "v1.13.52",
            "v1.13.51",
            "v1.13.50",
            "v1.13.49",
            "v1.13.31",
            "v1.13.48",
            "v1.13.46",
            "v1.13.47",
            "v1.13.45",
            "v1.13.44",
            "v1.13.43",
            "v1.13.42",
            "v1.13.41",
            "v1.13.40",
            "v1.13.39",
            "v1.13.38",
            "v1.13.37",
            "v1.13.29",
            "v1.13.36",
            "v1.13.35",
            "v1.13.34",
            "v1.13.33",
            "v1.13.32",
            "v1.13.30",
            "v1.13.25",
            "v1.13.28",
            "v1.13.27",
            "v1.13.26",
            "v1.13.24",
            "v1.13.23",
            "v1.13.22",
            "v1.13.21",
            "v1.13.20",
            "v1.13.19",
            "v1.13.18",
            "v1.13.17",
            "v1.13.16",
            "v1.13.15",
            "v1.13.14",
            "v1.13.13",
            "v1.13.12",
            "v1.13.11",
            "v1.13.10",
            "v1.13.9",
            "v1.13.7",
            "v1.13.6",
            "v1.13.5",
            "v1.13.4",
            "v1.13.3",
            "v1.13.2",
            "v1.13.1",
            "v1.12.80",
            "v1.12.79",
            "v1.12.78",
            "v1.12.77",
            "v1.12.76",
            "v1.12.74",
            "v1.12.75",
            "v1.12.73",
            "v1.12.72",
            "v1.12.71",
            "v1.12.70",
            "v1.12.69",
            "v1.12.68",
            "v1.12.66",
            "v1.12.65",
            "v1.12.60",
            "v1.12.64",
            "v1.12.63",
            "v1.12.62",
            "v1.12.61",
            "v1.12.59",
            "v1.12.58",
            "v1.12.57",
            "v1.12.56",
            "v1.12.54",
            "v1.12.55",
            "v1.12.53",
            "v1.12.52",
            "v1.12.51",
            "v1.12.50",
            "v1.12.29",
            "v1.12.49",
            "v1.12.48",
            "v1.12.47",
            "v1.12.46",
            "v1.12.45",
            "v1.12.44",
            "v1.12.39",
            "v1.12.43",
            "v1.12.42",
            "v1.12.41",
            "v1.12.40",
            "v1.12.38",
            "v1.12.37",
            "v1.12.34",
            "v1.12.36",
            "v1.12.35",
            "v1.12.33",
            "v1.12.32",
            "v1.12.31",
            "v1.12.30",
            "v1.12.28",
            "v1.12.27",
            "v1.12.26",
            "v1.12.25",
            "v1.12.24",
            "v1.12.20",
            "v1.12.23",
            "v1.12.22",
            "v1.12.21",
            "v1.12.19",
            "v1.12.18",
            "v1.12.17",
            "v1.12.16",
            "v1.12.15",
            "v1.12.14",
            "v1.12.13",
            "v1.12.12",
            "v1.12.11",
            "v1.12.10",
            "v1.12.7",
            "v1.12.9",
            "v1.12.8",
            "v1.12.6",
            "v1.12.5",
            "v1.12.4",
            "v1.12.3",
            "v1.12.1",
            "v1.11.51",
            "v1.11.50",
            "v1.11.49",
            "v1.11.48",
            "v1.11.47",
            "v1.11.46",
            "v1.11.45",
            "v1.11.44",
            "v1.11.40",
            "v1.11.43",
            "v1.11.42",
            "v1.11.38",
            "v1.11.41",
            "v1.11.33",
            "v1.11.39",
            "v1.11.37",
            "v1.11.36",
            "v1.11.35",
            "v1.11.34",
            "v1.11.32",
            "v1.11.31",
            "v1.11.30",
            "v1.11.29",
            "v1.11.28",
            "v1.11.27",
            "v1.11.26",
            "v1.11.25",
            "v1.11.24",
            "v1.11.22",
            "v1.11.23",
            "v1.11.21",
            "v1.11.20",
            "v1.11.19",
            "v1.11.18",
            "v1.11.17",
            "v1.11.16",
            "v1.11.2",
            "v1.11.15",
            "v1.11.14",
            "v1.11.13",
            "v1.11.12",
            "v1.11.11",
            "v1.11.10",
            "v1.11.9",
            "v1.11.8",
            "v1.11.7",
            "v1.11.6",
            "v1.11.5",
            "v1.11.4",
            "v1.11.3",
            "v1.10.58",
            "v1.11.1",
            "v1.10.57",
            "v1.10.55",
            "v1.10.56",
            "v1.10.54",
            "v1.10.53",
            "v1.10.51",
            "v1.10.52",
            "v1.10.50",
            "v1.10.49",
            "v1.10.48",
            "v1.10.47",
            "v1.10.46",
            "v1.10.45",
            "v1.10.44",
            "v1.10.43",
            "v1.10.42",
            "v1.10.41",
            "v1.10.40",
            "v1.10.39",
            "v1.10.38",
            "v1.10.37",
            "v1.10.36",
            "v1.10.35",
            "v1.10.34",
            "v1.10.33",
            "v1.10.32",
            "v1.10.31",
            "v1.10.30",
            "v1.10.29",
            "v1.10.28",
            "v1.10.27",
            "v1.10.26",
            "v1.10.25",
            "v1.10.24",
            "v1.10.23",
            "v1.10.22",
            "v1.10.21",
            "v1.10.20",
            "v1.10.19",
            "v1.10.18",
            "v1.10.17",
            "v1.10.16",
            "v1.10.15",
            "v1.10.14",
            "v1.10.13",
            "v1.10.12",
            "v1.10.11",
            "v1.10.10",
            "v1.10.6",
            "v1.10.9",
            "v1.10.8",
            "v1.10.7",
            "v1.10.5",
            "v1.10.4",
            "v1.10.3",
            "v1.10.2",
            "v1.10.1",
            "v1.9.37",
            "v1.9.36",
            "v1.9.35",
            "v1.9.34",
            "v1.9.33",
            "v1.9.32",
            "v1.9.31",
            "v1.9.30",
            "v1.9.29",
            "v1.9.28",
            "v1.9.27",
            "v1.9.26",
            "v1.9.25",
            "v1.9.24",
            "v1.9.23",
            "v1.9.22",
            "v1.9.13",
            "v1.9.21",
            "v1.9.20",
            "v1.9.19",
            "v1.9.18",
            "v1.9.17",
            "v1.9.16",
            "v1.9.15",
            "v1.9.14",
            "v1.9.12",
            "v1.9.11",
            "v1.9.10",
            "v1.9.9",
            "v1.9.8",
            "v1.9.6",
            "v1.9.7",
            "v1.9.5",
            "v1.9.4",
            "v1.9.3",
            "v1.8.62",
            "v1.9.2",
            "v1.9.1",
            "v1.8.61",
            "v1.8.60",
            "v1.8.59",
            "v1.8.58",
            "v1.8.54",
            "v1.8.56",
            "v1.8.57",
            "v1.8.55",
            "v1.8.53",
            "v1.8.52",
            "v1.8.51",
            "v1.8.50",
            "v1.8.49",
            "v1.8.48",
            "v1.8.44",
            "v1.8.47",
            "v1.8.46",
            "v1.8.45",
            "v1.8.43",
            "v1.8.42",
            "v1.8.41",
            "v1.8.40",
            "v1.8.39",
            "v1.8.38",
            "v1.8.37",
            "v1.8.36",
            "v1.8.35",
            "v1.8.34",
            "v1.8.33",
            "v1.8.32",
            "v1.8.31",
            "v1.8.28",
            "v1.8.30",
            "v1.8.29",
            "v1.8.22",
            "v1.8.27",
            "v1.8.26",
            "v1.8.25",
            "v1.8.24",
            "v1.8.23",
            "v1.8.21",
            "v1.8.20",
            "v1.8.19",
            "v1.8.18",
            "v1.8.13",
            "v1.8.17",
            "v1.8.16",
            "v1.8.15",
            "v1.8.14",
            "v1.8.11",
            "v1.8.12",
            "v1.8.10",
            "v1.8.9",
            "v1.8.8",
            "v1.8.7",
            "v1.8.6",
            "v1.8.5",
            "v1.8.4",
            "v1.8.3",
            "v1.8.2",
            "v1.8.1",
            "v1.7.54",
            "v1.7.53",
            "v1.7.52",
            "v1.7.51",
            "v1.7.50",
            "v1.7.49",
            "v1.7.48",
            "v1.7.47",
            "v1.7.46",
            "v1.7.45",
            "v1.7.44",
            "v1.7.43",
            "v1.7.39",
            "v1.7.42",
            "v1.7.41",
            "v1.7.40",
            "v1.7.38",
            "v1.7.36",
            "v1.7.37",
            "v1.7.35",
            "v1.7.34",
            "v1.7.33",
            "v1.7.32",
            "v1.7.31",
            "v1.7.30",
            "v1.7.29",
            "v1.7.28",
            "v1.7.27",
            "v1.7.26",
            "v1.7.25",
            "v1.7.24",
            "v1.7.23",
            "v1.7.22",
            "v1.7.21",
            "v1.7.16",
            "v1.7.20",
            "v1.7.10",
            "v1.7.19",
            "v1.7.18",
            "v1.7.17",
            "v1.7.15",
            "v1.7.14",
            "v1.7.13",
            "v1.7.12",
            "v1.7.11",
            "v1.7.9",
            "v1.7.8",
            "v1.7.7",
            "v1.7.6",
            "v1.7.5",
            "v1.7.4",
            "v1.7.3",
            "v1.7.2",
            "v1.7.1",
            "v1.6.45",
            "v1.6.44",
            "v1.6.43",
            "v1.6.35",
            "v1.6.42",
            "v1.6.41",
            "v1.6.40",
            "v1.6.39",
            "v1.6.38",
            "v1.6.37",
            "v1.6.36",
            "v1.6.34",
            "v1.6.33",
            "v1.6.32",
            "v1.6.31",
            "v1.6.30",
            "v1.6.29",
            "v1.6.28",
            "v1.6.24",
            "v1.6.21",
            "v1.6.27",
            "v1.6.26",
            "v1.6.25",
            "v1.6.23",
            "v1.6.22",
            "v1.6.20",
            "v1.6.19",
            "v1.6.15",
            "v1.6.18",
            "v1.6.17",
            "v1.6.16",
            "v1.6.14",
            "v1.6.13",
            "v1.6.12",
            "v1.6.11",
            "v1.6.10",
            "v1.6.9",
            "v1.6.8",
            "v1.6.7",
            "v1.6.6",
            "v1.6.5",
            "v1.6.4",
            "v1.6.3",
            "v1.6.2",
            "v1.6.1",
            "v1.5.82",
            "v1.5.81",
            "v1.5.80",
            "v1.5.79",
            "v1.5.78",
            "v1.5.77",
            "v1.5.76",
            "v1.5.75",
            "v1.5.74",
            "v1.5.73",
            "v1.5.72",
            "v1.5.71",
            "v1.5.70",
            "v1.5.69",
            "v1.5.68",
            "v1.5.67",
            "v1.5.66",
            "v1.5.65-android",
            "v1.5.65",
            "v1.5.64",
            "v1.5.63",
            "v1.5.62",
            "v1.5.61",
            "v1.5.60",
            "v1.5.59",
            "v1.5.51",
            "v1.5.58",
            "v1.5.57",
            "v1.5.55",
            "v1.5.56",
            "v1.5.54",
            "v1.5.53",
            "v1.5.52",
            "v1.5.50",
            "v1.5.47",
            "v1.5.49",
            "v1.5.48",
            "v1.5.46",
            "v1.5.45",
            "v1.5.44",
            "v1.5.43",
            "v1.5.42",
            "v1.5.41",
            "v1.5.40",
            "v1.5.37",
            "v1.5.39",
            "v1.5.38",
            "v1.5.36",
            "v1.5.35",
            "v1.5.34",
            "v1.5.33",
            "v1.5.32",
            "v1.5.30",
            "v1.5.31",
            "v1.5.29",
            "v1.5.28",
            "v1.5.27",
            "v1.5.26",
            "v1.5.25",
            "v1.5.24",
            "v1.5.23",
            "v1.5.22",
            "v1.5.21",
            "v1.5.20",
            "v1.5.19",
            "v1.5.18",
            "v1.5.15",
            "v1.5.17",
            "v1.5.16",
            "v1.5.14",
            "v1.5.13",
            "v1.5.12",
            "v1.5.11",
            "v1.5.10",
            "v1.5.9",
            "v1.5.8",
            "v1.5.7",
            "v1.5.6",
            "v1.5.5",
            "v1.5.4",
            "v1.5.3",
            "v1.5.2",
            "v1.5.1",
            "v1.4.46",
            "v1.4.45",
            "v1.4.44",
            "v1.4.43",
            "v1.4.38",
            "v1.4.42",
            "v1.4.41",
            "v1.4.40",
            "v1.4.39",
            "v1.4.37",
            "v1.4.36",
            "v1.4.35",
            "v1.4.34",
            "v1.4.33",
            "v1.4.32",
            "v1.4.31",
            "v1.4.30",
            "v1.4.29",
            "v1.4.28",
            "v1.4.27",
            "v1.4.26",
            "v1.4.25",
            "v1.4.24",
            "v1.4.23",
            "v1.4.22",
            "v1.3.37",
            "v1.4.21",
            "v1.4.20",
            "v1.4.19",
            "v1.4.18",
            "v1.4.17",
            "v1.4.16",
            "v1.4.15",
            "v1.4.14",
            "v1.4.13",
            "v1.4.12",
            "v1.4.11",
            "v1.4.10",
            "v1.4.3",
            "v1.4.9",
            "v1.4.8",
            "v1.4.7",
            "v1.4.6",
            "v1.4.5",
            "v1.4.4",
            "v1.4.2",
            "v1.3.55",
            "v1.4.1",
            "v1.3.54",
            "v1.3.53",
            "v1.3.52",
            "v1.3.51",
            "v1.3.50",
            "v1.3.49",
            "v1.3.48",
            "v1.3.47",
            "v1.3.46",
            "v1.3.45",
            "v1.3.38",
            "v1.3.44",
            "v1.3.43",
            "v1.3.42",
            "v1.3.41",
            "v1.3.40",
            "v1.3.39",
            "v1.3.36",
            "v1.3.35",
            "v1.3.34",
            "v1.3.33",
            "v1.3.32",
            "v1.3.31",
            "v1.3.30",
            "v1.3.29",
            "v1.3.28",
            "v1.3.27",
            "v1.3.26",
            "v1.3.25",
            "v1.3.24",
            "v1.3.23",
            "v1.3.17",
            "v1.3.22",
            "v1.3.21",
            "v1.3.20",
            "v1.3.19",
            "v1.3.18",
            "v1.3.16",
            "v1.3.15",
            "v1.3.14",
            "v1.3.13",
            "v1.3.12",
            "v1.3.11",
            "v1.3.10",
            "v1.3.9",
            "v1.3.8",
            "v1.3.7",
            "v1.3.6",
            "v1.3.5",
            "v1.3.4",
            "v1.3.3",
            "v1.3.2",
            "v1.3.1",
            "v0.74.21",
            "v0.74.20",
            "v0.74.16",
            "v0.74.19",
            "v0.74.18",
            "v0.74.17",
            "v0.74.15",
            "v0.74.14",
            "v0.74.13",
            "v0.74.12",
            "v0.74.11",
            "v0.74.10",
            "v0.74.9",
            "v0.74.8",
            "v0.74.7",
            "v0.74.6",
            "v0.74.5",
            "v0.74.4",
            "v0.74.3",
            "v0.74.2",
            "v0.74.1",
            "v0.73.62",
            "v0.73.61",
            "v0.73.60",
            "v0.73.59",
            "v0.73.58",
            "v0.73.57",
            "v0.73.56",
            "v0.73.55",
            "v0.73.54",
            "v0.73.53",
            "v0.73.52",
            "v0.73.51",
            "v0.73.50",
            "v0.73.49",
            "v0.73.48",
            "v0.73.47",
            "v0.73.46",
            "v0.73.45",
            "v0.73.44",
            "v0.73.43",
            "v0.73.42",
            "v0.73.41",
            "v0.73.40",
            "v0.73.39",
            "v0.73.38",
            "v0.73.37",
            "v0.73.36",
            "v0.73.35",
            "v0.73.34",
            "v0.73.33",
            "v0.73.32",
            "v0.73.31",
            "v0.73.30",
            "v0.73.29",
            "v0.73.28",
            "v0.73.27",
            "v0.73.26",
            "v0.73.25",
            "v0.73.24",
            "v0.73.23",
            "v0.73.22",
            "v0.73.21",
            "v0.73.20",
            "v0.73.19",
            "v0.73.18",
            "v0.73.17",
            "v0.73.16",
            "v0.73.15",
            "v0.73.14",
            "v0.73.12",
            "v0.73.13",
            "v0.73.11",
            "v0.73.10",
            "v0.73.9",
            "v0.73.8",
            "v0.73.7",
            "v0.73.6",
            "v0.73.5",
            "v0.73.4",
            "v0.73.3",
            "v0.73.2",
            "v0.73.1",
            "v0.72.104",
            "v0.72.103",
            "v0.72.102",
            "v0.72.101",
            "v0.72.100",
            "v0.72.99",
            "v0.72.98",
            "v0.72.97",
            "v0.72.96",
            "v0.72.95",
            "v0.72.94",
            "v0.72.93",
            "v0.72.92",
            "v0.72.91",
            "v0.72.90",
            "v0.72.89",
            "v0.72.88",
            "v0.72.87",
            "v0.72.86",
            "v0.72.85",
            "v0.72.84",
            "v0.72.83",
            "v0.72.82",
            "v0.72.81",
            "v0.72.80",
            "v0.72.79",
            "v0.72.78",
            "v0.72.77",
            "v0.72.76",
            "v0.72.75",
            "v0.72.74",
            "v0.72.73",
            "v0.72.72",
            "v0.72.71",
            "v0.72.70",
            "v0.72.68",
            "v0.72.69",
            "v0.72.67",
            "v0.72.66",
            "v0.72.63",
            "v0.72.65",
            "v0.72.64",
            "v0.72.62",
            "v0.72.61",
            "v0.72.60",
            "v0.72.59",
            "v0.72.58",
            "v0.72.57",
            "v0.72.56",
            "v0.72.55",
            "v0.72.54",
            "v0.72.53",
            "v0.72.52",
            "v0.72.51",
            "v0.72.50",
            "v0.72.49",
            "v0.72.48",
            "v0.72.47",
            "v0.72.46",
            "v0.72.45",
            "v0.72.44",
            "v0.72.43",
            "v0.72.42",
            "v0.72.41",
            "v0.72.40",
            "v0.72.39",
            "v0.72.38",
            "v0.72.37",
            "v0.72.36",
            "v0.72.35",
            "v0.72.34",
            "v0.72.33",
            "v0.72.32",
            "v0.72.31",
            "v0.72.30",
            "v0.72.29",
            "v0.72.28",
            "v0.72.27",
            "v0.72.26",
            "v0.72.25",
            "v0.72.24",
            "v0.72.23",
            "v0.72.22",
            "v0.72.21",
            "v0.72.20",
            "v0.72.19",
            "v0.72.18",
            "v0.72.17",
            "v0.72.16",
            "v0.72.15",
            "v0.72.14",
            "v0.72.13",
            "v0.72.12",
            "v0.72.11",
            "v0.72.9",
            "v0.72.10",
            "v0.72.8",
            "v0.72.7",
            "v0.72.6",
            "v0.72.5",
            "v0.72.4",
            "v0.72.3",
            "v0.72.2",
            "v0.72.1",
            "v0.71.69",
            "v0.71.68",
            "v0.71.67",
            "v0.71.66",
            "v0.71.65",
            "v0.71.64",
            "v0.71.63",
            "v0.71.62",
            "v0.71.61",
            "v0.71.60",
            "v0.71.59",
            "v0.71.58",
            "v0.71.57",
            "v0.71.56",
            "v0.71.55",
            "v0.71.52",
            "v0.71.51",
            "v0.71.50",
            "v0.71.49",
            "v0.71.48",
            "v0.71.47",
            "v0.71.46",
            "v0.71.45",
            "v0.71.44",
            "v0.71.43",
            "v0.71.42",
            "v0.71.41",
            "v0.71.40",
            "v0.71.39",
            "v0.71.38",
            "v0.71.37",
            "v0.71.36",
            "v0.71.35",
            "v0.71.34",
            "v0.71.33",
            "v0.71.32",
            "v0.71.31",
            "v0.71.30",
            "v0.71.29",
            "v0.71.28",
            "v0.71.27",
            "v0.71.26",
            "v0.71.25",
            "v0.71.24",
            "v0.71.23",
            "v0.71.22",
            "v0.71.21",
            "v0.71.20",
            "v0.71.19",
            "v0.71.18",
            "v0.71.17",
            "v0.71.16",
            "v0.71.15",
            "v0.71.14",
            "v0.71.13",
            "v0.71.12",
            "v0.71.11",
            "v0.71.10",
            "v0.71.9",
            "v0.71.8",
            "v0.71.7",
            "v0.71.5",
            "v0.71.4",
            "v0.71.3",
            "v0.71.2",
            "v0.70.64",
            "v0.71.1",
            "v0.70.60",
            "v0.70.24",
            "v0.70.63",
            "v0.70.62",
            "v0.70.61",
            "v0.70.59",
            "v0.70.57",
            "v0.70.58",
            "v0.70.56",
            "v0.70.51",
            "v0.70.55",
            "v0.70.54",
            "v0.70.53",
            "v0.70.52",
            "v0.70.50",
            "v0.70.48",
            "v0.70.49",
            "v0.70.47",
            "v0.70.46",
            "v0.70.45",
            "v0.70.44",
            "v0.70.43",
            "v0.70.42",
            "v0.70.41",
            "v0.70.40",
            "v0.70.39",
            "v0.70.37",
            "v0.70.38",
            "v0.70.36",
            "v0.70.35",
            "v0.70.34",
            "v0.70.33",
            "v0.70.31",
            "v0.70.32",
            "v0.70.30",
            "v0.70.27",
            "v0.70.29",
            "v0.70.28",
            "v0.70.26",
            "v0.70.25",
            "v0.70.23",
            "v0.70.22",
            "v0.70.20",
            "v0.70.21",
            "v0.70.15",
            "v0.70.19",
            "v0.70.18",
            "v0.70.17",
            "v0.70.16",
            "v0.70.14",
            "v0.70.13",
            "v0.70.12",
            "v0.70.11",
            "v0.70.10",
            "v0.70.9",
            "v0.70.8",
            "v0.70.7",
            "v0.70.6",
            "v0.70.5",
            "v0.70.4",
            "v0.70.3",
            "v0.70.2",
            "v0.67.57",
            "v0.70.1",
            "v0.69.90",
            "v0.69.89",
            "v0.69.88",
            "v0.69.87",
            "v0.69.86",
            "v0.69.85",
            "v0.69.83",
            "v0.69.84",
            "v0.69.82",
            "v0.69.81",
            "v0.69.80",
            "v0.69.79",
            "v0.69.78",
            "v0.69.77",
            "v0.69.76",
            "v0.69.75",
            "v0.69.74",
            "v0.69.73",
            "v0.69.72",
            "v0.69.71",
            "v0.69.70",
            "v0.69.69",
            "v0.69.68",
            "v0.69.67",
            "v0.69.66",
            "v0.69.65",
            "v0.69.64",
            "v0.69.63",
            "v0.69.62",
            "v0.69.61",
            "v0.69.60",
            "v0.69.59",
            "v0.69.58",
            "v0.69.57",
            "v0.69.56",
            "v0.69.55",
            "v0.69.54",
            "v0.69.53",
            "v0.69.52",
            "v0.69.51",
            "v0.69.50",
            "v0.69.49",
            "v0.69.48",
            "v0.69.47",
            "v0.69.46",
            "v0.69.42",
            "v0.69.45",
            "v0.69.44",
            "v0.69.43",
            "v0.69.41",
            "v0.69.40",
            "v0.69.39",
            "v0.69.38",
            "v0.69.37",
            "v0.69.36",
            "v0.69.35",
            "v0.69.33",
            "v0.69.32",
            "v0.69.31",
            "v0.69.30",
            "v0.69.29",
            "v0.69.28",
            "v0.69.27",
            "v0.69.26",
            "v0.69.24",
            "v0.69.25",
            "v0.69.23",
            "v0.69.22",
            "v0.69.21",
            "v0.69.20",
            "v0.69.19",
            "v0.69.18",
            "v0.69.17",
            "v0.69.16",
            "v0.69.15",
            "v0.69.14",
            "v0.69.13",
            "v0.69.12",
            "v0.69.11",
            "v0.69.10",
            "v0.69.9",
            "v0.69.8",
            "v0.69.7",
            "v0.69.6",
            "v0.69.5",
            "v0.69.4",
            "v0.69.3",
            "v0.69.2",
            "v0.69.1",
            "v0.68.82",
            "v0.68.81",
            "v0.68.80",
            "v0.68.79",
            "v0.68.78",
            "v0.68.77",
            "v0.68.76",
            "v0.68.75",
            "v0.68.74",
            "v0.68.73",
            "v0.68.69",
            "v0.68.72",
            "v0.68.71",
            "v0.68.70",
            "v0.68.68",
            "v0.68.67",
            "v0.68.66",
            "v0.68.64",
            "v0.68.63",
            "v0.68.55",
            "v0.68.62",
            "v0.68.61",
            "v0.68.60",
            "v0.68.59",
            "v0.68.58",
            "v0.68.57",
            "v0.68.56",
            "v0.68.54",
            "v0.68.53",
            "v0.68.52",
            "v0.68.51",
            "v0.68.50",
            "v0.68.49",
            "v0.68.48",
            "v0.68.47",
            "v0.68.46",
            "v0.68.45",
            "v0.68.44",
            "v0.68.43",
            "v0.68.42",
            "v0.68.41",
            "v0.68.40",
            "v0.68.39",
            "v0.68.38",
            "v0.68.37",
            "v0.68.36",
            "v0.68.35",
            "v0.68.34",
            "v0.68.33",
            "v0.68.31",
            "v0.68.32",
            "v0.68.30",
            "v0.68.29",
            "v0.68.28",
            "v0.68.27",
            "v0.68.24",
            "v0.68.26",
            "v0.68.25",
            "v0.68.23",
            "v0.68.22",
            "v0.68.18",
            "v0.68.21",
            "v0.68.20",
            "v0.68.19",
            "v0.68.17",
            "v0.68.16",
            "v0.68.14",
            "v0.68.13",
            "v0.68.12",
            "v0.68.11",
            "v0.68.10",
            "v0.68.9",
            "v0.68.8",
            "v0.68.7",
            "v0.68.6",
            "v0.68.2",
            "v0.68.5",
            "v0.68.4",
            "v0.68.3",
            "v0.68.1",
            "v0.67.70",
            "v0.67.69",
            "v0.67.68",
            "v0.67.67",
            "v0.67.66",
            "v0.67.63",
            "v0.67.65",
            "v0.67.64",
            "v0.67.62",
            "v0.67.61",
            "v0.67.60",
            "v0.67.52",
            "v0.67.59",
            "v0.67.58",
            "v0.67.56",
            "v0.67.55",
            "v0.67.54",
            "v0.67.53",
            "v0.67.51",
            "v0.67.50",
            "v0.67.49",
            "v0.67.48",
            "v0.67.47",
            "v0.67.46",
            "v0.67.45",
            "v0.67.44",
            "v0.67.43",
            "v0.67.42",
            "v0.67.41",
            "v0.67.40",
            "v0.67.39",
            "v0.67.38",
            "v0.67.37",
            "v0.67.36",
            "v0.67.35",
            "v0.67.21",
            "v0.67.34",
            "v0.67.33",
            "v0.67.32",
            "v0.67.20",
            "v0.67.31",
            "v0.67.30",
            "v0.67.29",
            "v0.67.28",
            "v0.67.27",
            "v0.67.26",
            "v0.67.25",
            "v0.67.24",
            "v0.67.23",
            "v0.67.22",
            "v0.67.19",
            "v0.67.18",
            "v0.67.17",
            "v0.67.16",
            "v0.67.15",
            "v0.67.14",
            "v0.67.13",
            "v0.67.12",
            "v0.67.11",
            "v0.67.10",
            "v0.67.9",
            "v0.67.8",
            "v0.67.7",
            "v0.67.6",
            "v0.67.5",
            "v0.67.4",
            "v0.67.3",
            "v0.67.2",
            "v0.67.1",
            "v0.66.54",
            "v0.66.57",
            "v0.66.56",
            "v0.66.55",
            "v0.66.53",
            "v0.66.52",
            "v0.66.51",
            "v0.66.50",
            "v0.66.49",
            "v0.66.48",
            "v0.66.47",
            "v0.66.45",
            "v0.66.44",
            "v0.66.43",
            "v0.66.42",
            "v0.66.41",
            "v0.66.40",
            "v0.66.39",
            "v0.66.38",
            "v0.66.37",
            "v0.66.36",
            "v0.66.35",
            "v0.66.34",
            "v0.66.33",
            "v0.66.32",
            "v0.66.31",
            "v0.66.30",
            "v0.66.29",
            "v0.66.28",
            "v0.66.27",
            "v0.66.23",
            "v0.66.26",
            "v0.66.25",
            "v0.66.24",
            "v0.66.22",
            "v0.66.21",
            "v0.66.20",
            "v0.66.19",
            "v0.66.18",
            "v0.66.17",
            "v0.66.16",
            "v0.66.15",
            "v0.66.14",
            "v0.66.13",
            "v0.66.12",
            "v0.66.11",
            "v0.66.10",
            "v0.66.9",
            "v0.66.8",
            "v0.66.7",
            "v0.66.6",
            "v0.66.5",
            "v0.66.4",
            "v0.66.3",
            "v0.66.2",
            "v0.66.1",
            "v0.65.70",
            "v0.65.69",
            "v0.65.68",
            "v0.65.67",
            "v0.65.66",
            "v0.65.65",
            "v0.65.64",
            "v0.65.63",
            "v0.65.62",
            "v0.65.61",
            "v0.65.60",
            "v0.65.59",
            "v0.65.58",
            "v0.65.57",
            "v0.65.56",
            "v0.65.55",
            "v0.65.54",
            "v0.65.53",
            "v0.65.52",
            "v0.65.50",
            "v0.65.49",
            "v0.65.48",
            "v0.65.47",
            "v0.65.46",
            "v0.65.45",
            "v0.65.44",
            "v0.65.43",
            "v0.65.42",
            "v0.65.41",
            "v0.65.40",
            "v0.65.39",
            "v0.65.32",
            "v0.65.38",
            "v0.65.37",
            "v0.65.36",
            "v0.65.35",
            "v0.65.34",
            "v0.65.33",
            "v0.65.31",
            "v0.65.30",
            "v0.65.29",
            "v0.65.28",
            "v0.65.27",
            "v0.65.26",
            "v0.65.25",
            "v0.65.24",
            "v0.65.23",
            "v0.65.22",
            "v0.65.21",
            "v0.65.10",
            "v0.65.20",
            "v0.65.19",
            "v0.65.18",
            "v0.65.17",
            "v0.65.16",
            "v0.65.15",
            "v0.65.14",
            "v0.65.13",
            "v0.65.12",
            "v0.65.11",
            "v0.65.9",
            "v0.65.8",
            "v0.65.7",
            "v0.65.6",
            "v0.65.5",
            "v0.65.4",
            "v0.65.3",
            "v0.65.2",
            "v0.65.1",
            "v0.64.28",
            "v0.64.27",
            "v0.64.26",
            "v0.64.25",
            "v0.64.24",
            "v0.64.23",
            "v0.64.22",
            "v0.64.21",
            "v0.64.20",
            "v0.64.16",
            "v0.64.19",
            "v0.64.18",
            "v0.64.17",
            "v0.64.15",
            "v0.64.14",
            "v0.64.13",
            "v0.64.12",
            "v0.64.11",
            "v0.64.10",
            "v0.64.9",
            "v0.64.8",
            "v0.64.7",
            "v0.64.6",
            "v0.64.5",
            "v0.64.4",
            "v0.64.3",
            "v0.64.2",
            "v0.64.1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8276.json"
          }
        }
      ],
      "modified": "2026-10-24T10:30:48.447305370Z",
      "provider": "osv",
      "references": [
        "https://hackerone.com/reports/1024668"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2020-8276",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 436763,
  "published_at": "2020-11-09T15:15:13.6+00:00"
}