Threats affecting pkg:npm/@fastify/session

A missing authorization vulnerability in the Video component of Google Chrome prior to version 156.0.8078.73 allows a remote attacker to bypass the web origin policy using a crafted HTML page. This issue is classified with high severity by Chromium security.

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

An improper input validation vulnerability in Google Chrome prior to version 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

An improper access control vulnerability in the Forms component of Google Chrome prior to version 156.0.8078.73 allows a remote attacker to bypass the web origin policy via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

An improper input validation vulnerability in the Core component of Google Chrome on Android prior to version 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability has a high security severity rating by Chromium. A fix is available in version 156.0.8078.73.

A memory corruption vulnerability exists in the Skia component of Google Chrome prior to version 156.0.8078.73. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The issue has been fixed in Chrome version 156.0.8078.73.

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A memory corruption vulnerability in the ANGLE component of Google Chrome prior to version 156.0.8078.73 allows a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. This issue has been fixed in Chrome version 156.0.8078.73.

Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A memory corruption vulnerability in the Turbolev component of Google Chrome prior to version 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This issue has been fixed in Chrome version 156.0.8078.73.

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

An improper access control vulnerability in the V8 engine of Google Chrome prior to version 156.0.8078.73 allows a remote attacker to read memory via a crafted HTML page. This vulnerability has been fixed in version 156.0.8078.73.

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)