Threats affecting pkg:bitnami/gitlab

A high severity vulnerability in Google Chrome on Windows prior to version 157.0.8103.78 allows a remote attacker to read memory outside the sandbox via a crafted HTML page due to an uninitialized resource in ANGLE.

A use-after-free vulnerability exists in the Frames component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.78.

A missing authorization vulnerability in the V8 engine of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to bypass the web origin policy via a crafted HTML page. This issue has been fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the HTML component of Google Chrome prior to version 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the browser component of Google Chrome on Windows versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The issue has been fixed in version 157.0.8103.78.

An improper initialization vulnerability in the Media component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability has been assigned a high severity rating by Chromium security. A fix is available in Chrome version 157.0.8103.78.

A high-severity vulnerability in Google Chrome prior to version 157.0.8103.78 involves an uninitialized GPU resource. This flaw could allow a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. The issue is fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability in the Accessibility component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability has been fixed in version 157.0.8103.78.

CVE-2026-126907 is a high-severity vulnerability in Google Chrome on Windows prior to version 157.0.8103.78. It involves an uninitialized resource in the Media component that could allow a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. This flaw was fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability in the compositing component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability is rated as high severity by Chromium security.

A use-after-free vulnerability exists in the CSS component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The issue has been fixed in version 157.0.8103.78.

An improper input validation vulnerability in the Core component of Google Chrome on Android versions prior to 157.0.8103.78 allows a local attacker to bypass the web origin policy via a co-installed app. This vulnerability is classified with high severity by Chromium security.

A missing authorization vulnerability in the V8 engine of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to bypass the web origin policy by using a crafted HTML page. This flaw has been assigned a high severity by Chromium security. The issue is fixed in Chrome version 157.0.8103.78.

An out-of-bounds read vulnerability exists in the Skia component of Google Chrome on Mac platforms prior to version 157.0.8103.78. This flaw allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. The issue has been assigned a high severity rating by Chromium security. A fix is available in Chrome version 157.0.8103.78.

A high-severity vulnerability in Google Chrome's Skia component prior to version 157.0.8103.78 allows a remote attacker to obtain cross-origin data by leveraging an uninitialized resource via a crafted HTML page. This issue was fixed in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the ANGLE component of Google Chrome prior to version 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.78.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome prior to version 157.0.8103.78 allows remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTML page. This vulnerability has been assigned high severity by Chromium security. The issue is fixed in Chrome version 157.0.8103.78.

CVE-2026-126903 is a high-severity vulnerability in Google Chrome's ANGLE component on Windows platforms prior to version 157.0.8103.78. It involves improper state validation that allows a remote attacker to bypass the web origin policy by using a crafted HTML page. This vulnerability has been fixed in Chrome version 157.0.8103.78.

An integer overflow vulnerability exists in the V8 engine of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a crafted HTML page. The issue has been assigned a high severity rating by Chromium security. A fix is available in Chrome version 157.0.8103.78.

A use-after-free vulnerability exists in the DOM component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The issue is classified with high severity by Chromium security.