CVE-2021-33595: 
NixOS vulnerability analysis and mitigation

CVE-2021-33595 is an address bar spoofing vulnerability discovered in F-Secure SAFE Browser for iOS. The vulnerability allows an attacker to show a legitimate URL in the address bar while loading content from a different domain, potentially misleading users about the authenticity of the website they are visiting (CERT-FR, CVE List).

The vulnerability exists due to inappropriate address handling in the browser that allows showing the legitimate URL in the address bar while loading content from a malicious domain. This makes users believe that the content is being served by a legitimate domain when it actually comes from an attacker-controlled site (CVE List).

The vulnerability could be exploited to conduct phishing attacks by making users believe they are interacting with a legitimate website while actually submitting their sensitive information to a malicious site. This creates a significant risk for credential theft and other forms of social engineering attacks (CERT-FR).

Users should update their F-Secure SAFE Browser to version 18.4.x or later which contains fixes for this vulnerability (CERT-FR).