Recommended action

Update Google/Chrome to 125.0.6422.60 if you use the affected versions. Test the change in a non-production environment first.

hol-guard supply-chain scan

What this means

CISA ADP Vulnrichment affects Google/Chrome (generic). Severity is high. This vulnerability is known to be exploited in the wild. Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Fixed versions are reported by the source feed; confirm compatibility before updating.

Recommended action

Update Google/Chrome to 125.0.6422.60 if you use the affected versions. Test the change in a non-production environment first.

hol-guard supply-chain scan

What this means

CISA ADP Vulnrichment affects Google/Chrome (generic). Severity is high. This vulnerability is known to be exploited in the wild. Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Fixed versions are reported by the source feed; confirm compatibility before updating.