{"action":"Upgrade firefox-esr to 52.2.0esr-1 or later.","affected":[{"fixed":"52.2.0esr-1","introduced":"0"}],"component":"firefox-esr","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["52.2.0esr-1"],"id":"tcs_01M5NCMX05XCFR3V6NK61J5JBK","modified_at":"2026-09-01T20:03:50.570339490Z","published_at":"2018-06-11T21:29:08.437Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-7764","https://security-tracker.debian.org/tracker/CVE-2017-7764"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-7764#Debian:14/firefox-esr","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-7764"}],"summary":"Characters from the \"Canadian Syllabics\" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw \"punycode\" form, allowing for dom"}