Threats affecting pkg:bitnami/gitlab

An out-of-bounds read vulnerability exists in the Media component of Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to potentially execute arbitrary code within the sandbox by convincing a user to visit a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the V8 JavaScript engine of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to read memory inside the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by the Chromium security team.

An out-of-bounds read vulnerability exists in the Skia graphics library used by Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by the Chromium security team.

A buffer overflow vulnerability exists in the Turbolev component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox environment by delivering a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Core component of Google Chrome on Windows versions prior to 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is classified with high security severity by Chromium.

An out-of-bounds write vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A missing authorization vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to bypass the web origin policy via a crafted HTML page. This flaw has been assigned CVE-2026-126896 and is considered high severity by Chromium security.

A use-after-free vulnerability exists in the Frames component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Layout component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified as critical by Chromium security.

An information leak vulnerability exists in the core of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The Chromium security team has rated this vulnerability as high severity.

A type confusion vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the MediaStream component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

An information leak vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to leak cross-origin data by using a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A type confusion vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78 allows remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTML page. The issue is classified with high severity by Chromium security.

An improper initialization vulnerability in the Media component of Google Chrome versions prior to 157.0.8103.78 could allow a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. This vulnerability is classified with high severity by Chromium security.

A high-severity out-of-bounds read vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to leak cross-origin data by using a crafted HTML page.

An off-by-one error in the V8 JavaScript engine in Google Chrome versions prior to 157.0.8103.78 could allow a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the ServiceWorker component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is classified as critical by Chromium security.

An integer overflow vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a crafted HTML page. The Chromium project rates the severity of this issue as High.

A use-after-free vulnerability exists in the Dawn component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.