Skip to content

Security: gz83/thorium

Security

SECURITY.md

Security

Thorium Security Policy

  • If it is a vulnerability in Chromium, please report it upstream Here.
  • If it is a vulnerability in Thorium, file an issue on GitHub. However, if it is major and/or a zero day, please email me instead at Alex313031@gmail.com

List of major vulnerabilities fixed in Thorium

– libwebp WebP bug CVE-2023-4863 - Fixed in M117

– libvpx VP8 bug CVE-2023-5217 - Fixed in M117

– USB data validation bug CVE-2023-5482 - Fixed in M120

– USB integer overflow bug CVE-2023-5849 - Fixed in M120

– Use after free bug CVE-2024-4671 - Fixed in M124

There aren’t any published security advisories