{"action":"Upgrade firefox to 83.0-r0 or later.","affected":[{"fixed":"83.0-r0","introduced":"0"}],"component":"firefox","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["83.0-r0"],"id":"tcs_01M6GQDXSNNKA1PK91RTVP1RTY","modified_at":"2026-11-03T06:32:31.243671638Z","published_at":"2020-12-09T01:15:13.473Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-26964","https://security.alpinelinux.org/vuln/CVE-2020-26964"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-26964#Alpine:v3.23/firefox","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-26964"}],"summary":"If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileg"}