Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
https://www.debian.org/security/2023/dsa-5526
https://security.gentoo.org/glsa/202401-34
https://security.gentoo.org/glsa/202312-07
https://security.gentoo.org/glsa/202311-11
https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html