tocsin

Debian/firefox-esr: high 8.1

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

Action: Upgrade firefox-esr to 140.5.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0140.5.0esr-1~deb12u1-

Fixed versions

140.5.0esr-1~deb12u1

Sources

published · modified · JSON