{"id":"CVE-2025-13019","aliases":["ALSA-2025:21280","ALSA-2025:21281","ALSA-2025:21843","ALSA-2025:21881","ALSA-2025:22363","DEBIAN-CVE-2025-13019","DLA-4370-1","DLA-4372-1","DSA-6054-1","DSA-6059-1","EUVD-2025-84324","GHSA-mv5g-cf64-38cv","MGASA-2025-0300","MGASA-2025-0305","OESA-2025-2701","OESA-2025-2702","OESA-2025-2703","OESA-2025-2704","OESA-2025-2705","OESA-2025-2770","RHSA-2025:21120","RHSA-2025:21121","RHSA-2025:21280","RHSA-2025:21281","RHSA-2025:21841","RHSA-2025:21842","RHSA-2025:21843","RHSA-2025:21844","RHSA-2025:21881","RHSA-2025:22363","RHSA-2025:22367","RHSA-2025:22368","RHSA-2025:22369","RHSA-2025:22371","RHSA-2025:22372","RHSA-2025:22373","RHSA-2025:22374","RHSA-2025:22375","RHSA-2025:22449","RHSA-2025:22450","RHSA-2025:22451","RHSA-2025:22791","RHSA-2025:22792","RHSA-2025:22882","RHSA-2025:22883","RLSA-2025:21280","RLSA-2025:21281","RLSA-2025:21843","RLSA-2025:21881","RLSA-2025:22363","SUSE-SU-2025:21021-1","SUSE-SU-2025:4173-1","SUSE-SU-2025:4174-1","SUSE-SU-2025:4195-1","UBUNTU-CVE-2025-13019","openSUSE-SU-2025:15735-1","openSUSE-SU-2025:15738-1","openSUSE-SU-2025:20065-1","openSUSE-SU-2026:11373-1","openSUSE-SU-2026:20002-1"],"status":"published","title":"Same-origin policy bypass in the DOM: Workers component","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00275,"percentile":0.20082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-942"],"published":"2025-11-11T15:47:16Z","modified":"2026-10-29T11:58:13Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["140.5.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["140.5.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["140.5.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:140.5.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:140.5.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:140.5.0esr-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","fixed_in":["1:140.7.1+build1-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.el9_7.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.el9_7.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-2.el8_10.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.el8_10.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1","1:102.10.0-1~deb10u1","1:102.10.0-1~deb11u1","1:102.11.0-1","1:102.11.0-1~deb10u1","1:102.11.0-1~deb11u1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1~deb11u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1~deb11u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.5.0esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2203sp3"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2203sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2403"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2403sp1"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2403sp2"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.oe2403sp2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el10_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el9_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el10_1"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-2.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.5.0-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-160000.1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-160000.1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.152.210.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-112.289.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-112.289.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.8.245.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.8.245.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.8.245.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.8.245.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-150200.8.245.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.7.1+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"145.0-1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-160000.1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0-1.1"}]}],"bundled":228},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.5.0-bp160.1.1"}]}],"bundled":9}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1988412","tags":["Permissions Required","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-87/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-90/","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-91/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13019","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-87"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-90"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-91"},{"url":"https://github.com/advisories/GHSA-mv5g-cf64-38cv"},{"url":"https://access.redhat.com/errata/RHSA-2025:21280","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13013","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13014","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13015","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13016","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13017","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13018","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13019","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13020","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414079","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414080","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414083","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414084","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414085","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414086","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414090","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414091","tags":["report"]},{"url":"https://bugzilla.redhat.com/2414092","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-21280.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21281","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-21281.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21843","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-21843.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21881","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-21881.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22363","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-22363.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-13019","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0300.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34742","tags":["report"]},{"url":"https://www.firefox.com/en-US/firefox/140.5.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0305.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34743","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.5.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-91/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2701","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13020","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2702","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2703","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2704","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2705","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2770","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21120","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414092","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21120.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13012","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13012","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13013","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13013","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13014","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13014","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13015","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13015","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13016","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13016","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13017","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13017","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13018","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13018","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13019","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13019","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13020","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-88/#CVE-2025-13020","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21121","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21121.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21280.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21281.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21841","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21841.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21842","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21842.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-120498","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21843.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21844","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21844.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21881.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22363.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22367","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22367.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22368","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22368.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22369","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22369.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22371","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22371.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22372","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22372.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22373","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22373.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22374","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22374.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22375","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22375.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22449","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22449.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22450","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22450.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22451","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22451.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22791","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22791.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22792","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22792.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22882","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22882.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22883","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22883.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21280","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21281","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21843","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21881","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22363","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521021-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1249391","tags":["report"]},{"url":"https://bugzilla.suse.com/1250452","tags":["report"]},{"url":"https://bugzilla.suse.com/1251263","tags":["report"]},{"url":"https://bugzilla.suse.com/1253188","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13020","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254173-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254174-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254195-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-13019","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/#CVE-2025-13019","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/#CVE-2025-13019","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7991-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8973","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-13019","title":"Same-origin policy bypass in the DOM: Workers component","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","status":"published","published":"2025-11-11T15:47:16.759Z","modified":"2026-04-13T14:26:31.931Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:32:43.437394Z"}],"euvd":[{"id":"EUVD-2025-84324","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","status":"published","published":"2025-11-11T15:47:16Z","modified":"2026-04-13T14:26:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:24:28.856779Z"}],"ghsa":[{"id":"GHSA-mv5g-cf64-38cv","title":"Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u003c 145...","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u003c 145 and Firefox ESR \u003c 140.5.","status":"published","published":"2025-11-11T18:30:16Z","modified":"2025-11-19T21:32:21Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T15:04:53.631555Z"}],"nvd":[{"id":"CVE-2025-13019","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","status":"published","published":"2025-11-11T16:15:39Z","modified":"2026-10-23T22:10:00.16Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:11:42.870953Z"}],"osv":[{"id":"CVE-2025-13019","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u003c 145, Firefox ESR \u003c 140.5, Thunderbird \u003c 145, and Thunderbird \u003c 140.5.","status":"published","published":"2025-11-11T16:15:39Z","modified":"2026-07-26T13:44:56.025003991Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"DEBIAN-CVE-2025-13019","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","status":"published","published":"2025-11-11T16:15:39Z","modified":"2026-10-24T09:47:36.229625007Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2025-2701","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-22T11:09:49Z","modified":"2026-08-18T01:19:20.02244264Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2702","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-22T11:09:49Z","modified":"2026-08-18T01:19:20.009359811Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2703","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-22T11:09:49Z","modified":"2026-08-18T01:19:20.142217086Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2704","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-22T11:09:49Z","modified":"2026-08-18T01:19:20.253001115Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2705","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-22T11:09:49Z","modified":"2026-08-18T01:19:20.183030455Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2770","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nRace condition in the Graphics component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, Firefox ESR \u0026lt; 115.30, Thunderbird \u0026lt; 145, and Thunderbird \u0026lt; 140.5.(CVE-2025-13012)\n\nMitigation bypass in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13013)\n\nUse-after-free in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13014)\n\nSpoofing issue in Firefox. This vulnerability affects Firefox \u0026lt; 145, Firefox ESR \u0026lt; 140.5, and Firefox ESR \u0026lt; 115.30.(CVE-2025-13015)\n\nIncorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13016)\n\nSame-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13017)\n\nMitigation bypass vulnerability in the DOM Security component. This vulnerability affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5, potentially allowing remote code execution.(CVE-2025-13018)\n\nSame-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5.(CVE-2025-13019)\n\nUse-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 145 and Firefox ESR \u0026lt; 140.5. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code, affecting confidentiality, integrity, and availability.(CVE-2025-13020)","status":"published","published":"2025-11-28T11:09:53Z","modified":"2026-08-18T01:19:22.134745221Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2025:21120","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-11-13T10:07:27Z","modified":"2026-06-30T10:22:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21121","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-11-13T10:07:28Z","modified":"2026-06-30T10:22:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21280","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-11-14T10:14:16Z","modified":"2026-06-30T10:22:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21281","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-11-14T10:14:17Z","modified":"2026-06-30T10:22:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21841","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-11-21T11:27:28Z","modified":"2026-06-30T10:22:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21842","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-11-21T11:27:29Z","modified":"2026-06-30T10:22:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21843","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-11-21T11:27:30Z","modified":"2026-06-30T10:22:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21844","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-11-21T11:27:31Z","modified":"2026-06-30T10:22:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21881","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-11-21T11:27:32Z","modified":"2026-06-30T10:22:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22363","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:01Z","modified":"2026-06-30T10:23:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22367","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:04Z","modified":"2026-06-30T10:23:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22368","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:04Z","modified":"2026-06-30T10:23:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22369","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:05Z","modified":"2026-06-30T10:23:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22371","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:06Z","modified":"2026-06-30T10:23:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22372","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:07Z","modified":"2026-06-30T10:23:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22373","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:07Z","modified":"2026-06-30T10:23:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22374","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:08Z","modified":"2026-06-30T10:23:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22375","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-12-01T10:04:09Z","modified":"2026-06-30T10:23:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22449","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-02T10:06:49Z","modified":"2026-06-30T10:23:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22450","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-02T10:06:49Z","modified":"2026-06-30T10:23:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22451","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-02T10:06:50Z","modified":"2026-06-30T10:23:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22791","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-08T10:03:56Z","modified":"2026-06-30T10:23:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22792","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-08T10:03:57Z","modified":"2026-06-30T10:23:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22882","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-09T10:06:10Z","modified":"2026-06-30T10:23:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22883","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-12-09T10:06:11Z","modified":"2026-06-30T10:23:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:21280","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n\n* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n\n* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n\n* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n\n* firefox: Race condition in the Graphics component (CVE-2025-13012)\n\n* firefox: Spoofing issue in Firefox (CVE-2025-13015)\n\n* firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n\n* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:13:51.682496Z","modified":"2025-11-21T18:49:00.001123Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:21281","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n\n* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n\n* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n\n* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n\n* firefox: Race condition in the Graphics component (CVE-2025-13012)\n\n* firefox: Spoofing issue in Firefox (CVE-2025-13015)\n\n* firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n\n* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:19:15.687303Z","modified":"2025-11-21T18:49:00.437667Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:21843","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n\n* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n\n* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n\n* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n\n* firefox: Race condition in the Graphics component (CVE-2025-13012)\n\n* firefox: Spoofing issue in Firefox (CVE-2025-13015)\n\n* firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n\n* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:19:15.687303Z","modified":"2025-11-21T18:49:00.894588Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:21881","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n\n* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n\n* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n\n* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n\n* firefox: Race condition in the Graphics component (CVE-2025-13012)\n\n* firefox: Spoofing issue in Firefox (CVE-2025-13015)\n\n* firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n\n* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T09:01:19.318268Z","modified":"2025-11-21T09:32:43.381737Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:22363","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n\n* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n\n* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n\n* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n\n* firefox: Race condition in the Graphics component (CVE-2025-13012)\n\n* firefox: Spoofing issue in Firefox (CVE-2025-13015)\n\n* firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n\n* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-01T09:08:07.644185Z","modified":"2025-12-01T09:48:44.885795Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-13019","description":"Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.","status":"published","published":"2025-11-11T16:15:00Z","modified":"2026-10-28T20:15:47.807228162Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"ALSA-2025:21280","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n  * firefox: Race condition in the Graphics component (CVE-2025-13012)\n  * firefox: Spoofing issue in Firefox (CVE-2025-13015)\n  * firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-13T00:00:00Z","modified":"2026-10-29T11:32:29.054472468Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21281","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n  * firefox: Race condition in the Graphics component (CVE-2025-13012)\n  * firefox: Spoofing issue in Firefox (CVE-2025-13015)\n  * firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-13T00:00:00Z","modified":"2026-10-29T11:58:13.885043Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21843","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n  * firefox: Race condition in the Graphics component (CVE-2025-13012)\n  * firefox: Spoofing issue in Firefox (CVE-2025-13015)\n  * firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-20T00:00:00Z","modified":"2026-10-29T11:58:12.595417Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21881","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n  * firefox: Race condition in the Graphics component (CVE-2025-13012)\n  * firefox: Spoofing issue in Firefox (CVE-2025-13015)\n  * firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-20T00:00:00Z","modified":"2026-10-29T11:02:28.242100044Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:22363","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)\n  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)\n  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)\n  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)\n  * firefox: Race condition in the Graphics component (CVE-2025-13012)\n  * firefox: Spoofing issue in Firefox (CVE-2025-13015)\n  * firefox: Mitigation bypass in the DOM: Core \u0026 HTML component (CVE-2025-13013)\n  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-01T00:00:00Z","modified":"2026-10-29T11:02:22.910987787Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"DLA-4370-1","title":"firefox-esr - security update","status":"published","published":"2025-11-13T00:00:00Z","modified":"2025-11-13T12:17:38.853582Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DLA-4372-1","title":"thunderbird - security update","status":"published","published":"2025-11-16T00:00:00Z","modified":"2025-11-16T13:17:51.225407Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6054-1","title":"firefox-esr - security update","status":"published","published":"2025-11-12T00:00:00Z","modified":"2025-11-12T23:34:03.884825Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-6059-1","title":"thunderbird - security update","status":"published","published":"2025-11-16T00:00:00Z","modified":"2025-11-16T13:17:51.807901Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0300","title":"Updated firefox packages fix security vulnerabilities","description":"Race condition in the Graphics component. (CVE-2025-13012)\nMitigation bypass in the DOM: Core \u0026 HTML component. (CVE-2025-13013)\nCVE-2025-13014: Use-after-free in the Audio/Video component.\n(CVE-2025-13014)\nSpoofing issue in Firefox. (CVE-2025-13015)\nIncorrect boundary conditions in the JavaScript: WebAssembly component.\n(CVE-2025-13016)\nSame-origin policy bypass in the DOM: Notifications component.\n(CVE-2025-13017)\nMitigation bypass in the DOM: Security component. (CVE-2025-13018)\nSame-origin policy bypass in the DOM: Workers component.\n(CVE-2025-13019)\nUse-after-free in the WebRTC: Audio/Video component. (CVE-2025-13020)\n","status":"published","published":"2025-11-17T22:14:28Z","modified":"2026-04-16T04:43:31.850344391Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"MGASA-2025-0305","title":"Updated thunderbird packages fix security vulnerabilities","description":"Race condition in the Graphics component. (CVE-2025-13012)\nMitigation bypass in the DOM: Core \u0026 HTML component. (CVE-2025-13013)\nCVE-2025-13014: Use-after-free in the Audio/Video component.\n(CVE-2025-13014)\nSpoofing issue in Firefox. (CVE-2025-13015)\nIncorrect boundary conditions in the JavaScript: WebAssembly component.\n(CVE-2025-13016)\nSame-origin policy bypass in the DOM: Notifications component.\n(CVE-2025-13017)\nMitigation bypass in the DOM: Security component. (CVE-2025-13018)\nSame-origin policy bypass in the DOM: Workers component.\n(CVE-2025-13019)\nUse-after-free in the WebRTC: Audio/Video component. (CVE-2025-13020)\n","status":"published","published":"2025-11-19T02:16:19Z","modified":"2026-04-16T04:42:19.287322578Z","updated_at":"2026-11-02T15:49:43.178336Z"}]},"sources_more":{"osv":9}}