GHSA-rqw3-7f5v-7r6j
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: November 24, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.