PatchGap
Chrome · Network

CVE-2026-113306

Input Validation in Network
Low chrome Input Validation 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactImproper input validation in Network
DescriptionImproper input validation in Network
ComponentNetwork
Bug ClassInput Validation
Tracker524695296
Fix commit7b98aa418980 (devtools/devtools-frontend) +220/-99
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-20

Files Changed

  • front_end/panels/network/NetworkDataGridNode.test.ts
  • front_end/panels/network/NetworkLogView.ts
  • front_end/ui/legacy/components/utils/Linkifier.ts
  • front_end/ui/legacy/components/utils/Linkifier.test.ts
  • front_end/ui/legacy/components/source_frame/ImageView.ts
  • front_end/core/common/ParsedURL.test.ts
  • front_end/panels/common/ExtensionServer.ts
  • front_end/core/common/ParsedURL.ts
  • front_end/models/har/HARFormat.ts
  • front_end/panels/common/ExtensionServer.test.ts
  • front_end/panels/network/NetworkDataGridNode.ts
  • front_end/models/har/Importer.test.ts
  • test/e2e/network/network-datagrid.test.ts

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page