tocsin

Debian/firefox-esr: high 8.8

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled Jav

Action: Upgrade firefox-esr to 91.9.1esr-1 or later.

Affected

introducedfixedlast affected
091.9.1esr-1-

Fixed versions

91.9.1esr-1

Sources

published · modified · JSON