chromium is vulnerable to content spoofing. Inappropriate implementation in permissions allows a remote attacker to spoof the contents of a permission dialog via a malicious HTML page.
lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html
chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
crbug.com/841622
lists.fedoraproject.org/archives/list/[email protected]/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
security-tracker.debian.org/tracker/CVE-2020-6564
www.debian.org/security/2021/dsa-4824