Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9473.json"