Threats affecting pkg:bitnami/gitlab

A type confusion vulnerability in the Turbolev component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability has been assigned high severity by Chromium security. The issue is fixed in Chrome version 157.0.8103.78.

A buffer overflow vulnerability exists in the Turbolev component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The issue has been fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the Dawn component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by crafting a malicious HTML page. The vulnerability has been assigned a high severity by Chromium security. A fix is available in Chrome version 157.0.8103.78.

An incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. This issue has been fixed in Chrome version 157.0.8103.78.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome prior to version 157.0.8103.78 allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. This vulnerability has been assigned high severity by Chromium security. A fix is available in Chrome version 157.0.8103.78.

A high-severity vulnerability in Google Chrome's Skia component prior to version 157.0.8103.78 allows a remote attacker to obtain cross-origin data via a crafted HTML page. This issue is caused by an uninitialized resource, which could lead to unauthorized data access across origins.

An out of bounds read vulnerability exists in the Skia component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to leak cross-origin data by using a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Extensions component of Google Chrome on Windows versions prior to 157.0.8103.78. This flaw allows a remote attacker, through social engineering and a crafted HTML page, to execute arbitrary code outside the browser sandbox. The vulnerability has been fixed in Chrome version 157.0.8103.78.

A vulnerability in Google Chrome's V8 engine prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. This issue is classified with high severity by Chromium security. The flaw is fixed in Chrome version 157.0.8103.78.

A vulnerability in Google Chrome prior to version 157.0.8103.78 involves incomplete cleanup of the cache, which allows a remote attacker to obtain cross-origin data via a crafted HTML page. This issue has been fixed in version 157.0.8103.78.

A memory corruption vulnerability exists in the V8 engine of Google Chrome prior to version 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The issue has been assigned a high severity by Chromium security. A fix is available in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the Media component of Google Chrome on Android versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in version 157.0.8103.78.

An out of bounds read vulnerability exists in the Skia component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to leak cross-origin data by using a crafted HTML page. The issue has been fixed in version 157.0.8103.78.

CVE-2026-126884 is a high-severity out-of-bounds read vulnerability in the Skia component of Google Chrome prior to version 157.0.8103.78. It allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. This flaw was fixed in Chrome version 157.0.8103.78.

An uninitialized resource vulnerability in the Skia component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. This vulnerability has been assigned a high severity by Chromium security. A fix is available in Chrome version 157.0.8103.78.

An incorrect authorization vulnerability in Google Chrome Extensions prior to version 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox by tricking a user into installing a crafted extension. This issue has been fixed in version 157.0.8103.78.

A use-after-free vulnerability exists in the Layout component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The issue has been fixed in version 157.0.8103.78.

An integer overflow vulnerability in the Skia component of Google Chrome prior to version 157.0.8103.78 allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. This issue has been fixed in version 157.0.8103.78.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome prior to version 157.0.8103.78 allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. This issue is classified with high severity by Chromium security.

A use-after-free vulnerability in the V8 engine of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to read memory inside the sandbox via a crafted HTML page. This vulnerability has been assigned a high severity by Chromium security. The issue is fixed in Chrome version 157.0.8103.78.