{"action":"Upgrade librewolf to 88.0-r0 or later.","affected":[{"fixed":"88.0-r0","introduced":"0"}],"component":"librewolf","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.21","exploited":false,"fixed_versions":["88.0-r0"],"id":"tcs_01M6GN9CCBAZTGJ36VYCZFHSS5","modified_at":"2026-11-03T06:32:27.586145384Z","published_at":"2021-06-24T14:15:09.513Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2021-24000","https://security.alpinelinux.org/vuln/CVE-2021-24000"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2021-24000#Alpine:v3.21/librewolf","url":"https://osv.dev/vulnerability/ALPINE-CVE-2021-24000"}],"summary":"A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements"}