Urgent: Chrome 138 patches multiple high‑severity V8/ANGLE/GPU bugs — at least one zero‑day was exploited
Key update
In July 2025 Google rolled out Stable‑channel Chrome 138.x updates that fix multiple high‑severity vulnerabilities in V8 and the GPU/ANGLE components; at least one of these flaws was actively exploited in the wild. The fixes are already landed in the Chrome Stable channel, and vendor updates for other Chromium‑based browsers and downstream projects (headless Chromium used by Puppeteer/Playwright, Electron, CI Docker images, etc.) are following.
Why it matters
This is a real operational risk for developers and CI systems: the V8/GPU bugs can be triggered by crafted web content and have been used for targeted attacks, which means both developer machines (browsers used for testing or browsing) and automation infrastructure that runs headless Chromium or embeds Chromium (Electron apps, test runners, screenshot services, crawlers) are exposed until updated. Practically, you should (1) update local Chrome installs and any Chromium‑based browsers on developer workstations; (2) rebuild and redeploy any CI images or Docker containers that include headless Chromium and update pinned Chromium/Electron versions used in tests or production; and (3) track vendor advisories for Playwright/Puppeteer/Electron and apply their patched runtimes. Treat this like a high‑priority patch day — delaying updates risks remote code execution or sandbox escapes via web content your tooling processes.
Source
Read Next
AWS CDK splits the CLI from the Construct Library (independent releases & new CLI repo)
August 31, 2025AWS announced the CDK CLI and the CDK Construct Library will be released independently and the CLI is moving to a new repository — this changes how you version, install, and automate CDK in CI.
Bun adds Bun.SQL — a zero‑dependency unified SQL client (MySQL, PostgreSQL, SQLite)
August 30, 2025Bun v1.2.21 (Aug 25, 2025) introduces Bun.SQL: a single, zero‑dependency SQL client that supports MySQL/MariaDB (Zig driver), PostgreSQL and SQLite with a consistent tagged‑template API.
pnpm 10.12 (v10.12.1) adds an experimental global virtual store for near‑instant local installs
August 29, 2025pnpm 10.12 introduces a central, graph-hashed virtual store that lets multiple projects reuse exact dependency graphs, dramatically speeding up local installs on warm caches and improving monorepo workflows.