Package Health/passbolt-browser-extension

passbolt-browser-extension

Passbolt web extension for the open source password manager for teams

Latest 5.16.1

NPM

88%

Total Score

healthy

Healthy release with active maintenance and organization backing; the main caveat is an incomplete workflow audit.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

The package has no build attestation, so consumers cannot independently verify the registry artifact’s build provenance. The GitLab trusted publisher context partly offsets this, but does not provide an attestation.

Workflow audit

The audit found no dangerous triggers, untrusted checkouts, or script injection, but only two of three workflows were analyzed and one file failed; three of five action references are unpinned. CI hygiene is therefore incomplete.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10378 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. passbolt-browser-extension is vulnerable to CSV Injection in versions 5.0.0 - 5.9.0.	5.0.0 - 5.9.0	Low
AIKIDO-2026-10133 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. passbolt-browser-extension is vulnerable to Improper Restriction of Rendered UI Layers or Frames in versions 3.3.0 - 5.8.0.	3.3.0 - 5.8.0	Medium
CVE-2024-33669 passbolt-browser-extension is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 4.6.2.	0.0.0 - 4.6.2	Medium