{"action":"Upgrade mozjs115 to 115.14.0-r0 or later.","affected":[{"fixed":"115.14.0-r0","introduced":"0"}],"component":"mozjs115","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["115.14.0-r0"],"id":"tcs_01M6GB03A182J0635MWX2EEW1E","modified_at":"2026-11-03T06:30:37.426754355Z","published_at":"2024-08-06T13:15:57.543Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-7527","https://security.alpinelinux.org/vuln/CVE-2024-7527"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-7527#Alpine:v3.19/mozjs115","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-7527"}],"summary":"Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thund"}