{"action":"Upgrade firefox-esr to 68.2.0esr-1 or later.","affected":[{"fixed":"68.2.0esr-1","introduced":"0"}],"component":"firefox-esr","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["68.2.0esr-1"],"id":"tcs_01M5NDQB00BK8YXEVF4ET3F1SA","modified_at":"2026-09-21T07:00:26.382836381Z","published_at":"2020-01-08T20:15:12.953Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-11763","https://security-tracker.debian.org/tracker/CVE-2019-11763"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-11763","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-11763"}],"summary":"Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could"}