{"id":"CVE-2025-6424","aliases":["ALSA-2025:10072","ALSA-2025:10073","ALSA-2025:10074","ALSA-2025:10246","DEBIAN-CVE-2025-6424","DLA-4231-1","DLA-4239-1","DSA-5950-1","DSA-5959-1","EUVD-2025-19086","GHSA-87c4-94w2-rw7j","MGASA-2025-0201","MGASA-2025-0228","OESA-2025-1717","OESA-2025-1718","OESA-2025-1719","OESA-2025-1720","OESA-2025-1782","OESA-2025-1912","RHSA-2025:10072","RHSA-2025:10073","RHSA-2025:10074","RHSA-2025:10159","RHSA-2025:10160","RHSA-2025:10161","RHSA-2025:10163","RHSA-2025:10164","RHSA-2025:10165","RHSA-2025:10166","RHSA-2025:10181","RHSA-2025:10182","RHSA-2025:10183","RHSA-2025:10184","RHSA-2025:10185","RHSA-2025:10186","RHSA-2025:10187","RHSA-2025:10188","RHSA-2025:10195","RHSA-2025:10196","RHSA-2025:10246","RLSA-2025:10072","RLSA-2025:10073","RLSA-2025:10074","RLSA-2025:10195","RLSA-2025:10196","RLSA-2025:10246","SUSE-SU-2025:02122-1","SUSE-SU-2025:02123-1","SUSE-SU-2025:02339-1","SUSE-SU-2025:02368-1","SUSE-SU-2025:02529-1","SUSE-SU-2025:02546-1","SUSE-SU-2025:21170-1","UBUNTU-CVE-2025-6424","USN-7663-1","openSUSE-SU-2025-20135-1","openSUSE-SU-2025:15216-1","openSUSE-SU-2025:15312-1","openSUSE-SU-2025:15315-1","openSUSE-SU-2025:15325-1","openSUSE-SU-2025:20135-1"],"status":"published","title":"Use-after-free in FontFaceSet","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.079,"percentile":0.94755,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-06-24T12:27:59Z","modified":"2026-10-29T11:58:17Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["128.12.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:128.12.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","fixed_in":["1:128.12.0+build1-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el9_6.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el9_6.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el8_10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el8_10.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1~deb11u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1~deb11u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1","1:102.10.0-1~deb10u1","1:102.10.0-1~deb11u1","1:102.11.0-1","1:102.11.0-1~deb10u1","1:102.11.0-1~deb11u1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1~deb11u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1~deb11u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250613.00-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.113.0-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-112.265.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-112.265.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0-112.270.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-35.19.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0-112.270.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-35.19.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150200.3.11.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150200.3.11.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1"],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0.2-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1966423","tags":["Permissions Required","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-51/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-52/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-54/","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-55/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6424","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-51"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-52"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-54"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-55"},{"url":"https://github.com/advisories/GHSA-87c4-94w2-rw7j"},{"url":"https://access.redhat.com/errata/RHSA-2025:10072","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6424","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6425","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6429","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6430","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374555","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374559","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374561","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374562","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-10072.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10073","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-10073.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10074","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10074.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10246","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2372281","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10246.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-5986.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6424.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6425.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6429.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6430.html","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6424","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0201.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34393","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34430","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_113.html","tags":["web"]},{"url":"https://www.mozilla.org/en-US/firefox/128.12.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0228.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34415","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-55/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.14.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6430","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1718","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1719","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1720","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1782","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10072.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6424","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6424","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6425","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6425","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6429","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6429","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6430","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6430","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10073.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10074.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10159","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372281","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5986","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5986","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/#CVE-2025-5986","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10160","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10160.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10161","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10161.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10163","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10163.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10164","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10164.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10165","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10165.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10166","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10166.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10181","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10181.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10182","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10182.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10183","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10183.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10184","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10184.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10185","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10185.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10186","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10186.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10187","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10187.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10188","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10188.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10196","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10196.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10246.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10072","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10073","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10074","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10195","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10196","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10246","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244670","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6430","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502123-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502339-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6436","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502368-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237231","tags":["report"]},{"url":"https://bugzilla.suse.com/1246664","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8040","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521170-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9185","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-6424","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-51/#CVE-2025-6424","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/#CVE-2025-6424","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7663-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-43097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-26695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-26696","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6424","title":"Use-after-free in FontFaceSet","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T12:27:59.669Z","modified":"2026-04-13T14:26:04.861Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:40.072186Z"}],"euvd":[{"id":"EUVD-2025-19086","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T12:27:59Z","modified":"2026-04-13T14:26:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:24:28.856779Z"}],"ghsa":[{"id":"GHSA-87c4-94w2-rw7j","title":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability...","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, and Firefox ESR \u003c 128.12.","status":"published","published":"2025-06-26T21:31:06Z","modified":"2025-11-03T21:35:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:25.4654Z"}],"nvd":[{"id":"CVE-2025-6424","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:23.273Z","modified":"2026-10-23T22:10:00.16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:11:14.091082Z"}],"osv":[{"id":"CVE-2025-6424","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.","status":"published","published":"2025-06-24T13:15:23.273Z","modified":"2026-10-29T11:12:08.753443785Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:51.851511Z"},{"id":"DEBIAN-CVE-2025-6424","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:23.273Z","modified":"2026-10-24T09:47:33.617089029Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-1717","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.666497485Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1718","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.632828673Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1719","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:23.333656823Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1720","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.848492011Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1782","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-11T11:08:52Z","modified":"2026-08-18T01:18:52.018398764Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1912","title":"thunderbird security update","description":"Security Fix(es):\n\nA use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-25T11:08:59Z","modified":"2026-08-18T01:18:55.766321357Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:10072","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:23Z","modified":"2026-06-30T10:11:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10073","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:24Z","modified":"2026-06-30T10:11:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10074","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:25Z","modified":"2026-06-30T10:11:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10159","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:38Z","modified":"2026-06-30T10:11:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10160","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:39Z","modified":"2026-06-30T10:11:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10161","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:39Z","modified":"2026-06-30T10:11:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10163","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:40Z","modified":"2026-06-30T10:11:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10164","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:40Z","modified":"2026-06-30T10:11:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10165","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:41Z","modified":"2026-06-30T10:11:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10166","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:42Z","modified":"2026-06-30T10:11:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10181","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:44Z","modified":"2026-06-30T10:11:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10182","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:45Z","modified":"2026-06-30T10:11:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10183","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:45Z","modified":"2026-06-30T10:11:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10184","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:46Z","modified":"2026-06-30T10:11:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10185","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:47Z","modified":"2026-06-30T10:11:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10186","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:48Z","modified":"2026-06-30T10:11:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10187","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:48Z","modified":"2026-06-30T10:11:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10188","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:49Z","modified":"2026-06-30T10:11:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10195","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:54Z","modified":"2026-06-30T10:11:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10196","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:55Z","modified":"2026-06-30T10:11:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10246","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:57Z","modified":"2026-06-30T10:11:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RLSA-2025:10072","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:50:17.541518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10073","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:19:25.613568Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10074","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T14:33:28.623561Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10195","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:19:24.595499Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10196","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:59.615715Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10246","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:24.7932Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-6424","description":"A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:00Z","modified":"2026-10-28T20:15:57.491983356Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"ALSA-2025:10072","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:31:55.135725986Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10073","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:58:17.048004Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10074","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:02:22.222174942Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10246","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-02T00:00:00Z","modified":"2026-10-29T11:12:04.870444422Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"DLA-4231-1","title":"firefox-esr - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T01:18:47.320307Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DLA-4239-1","title":"thunderbird - security update","status":"published","published":"2025-07-11T00:00:00Z","modified":"2026-03-09T02:10:59.340628Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5950-1","title":"firefox-esr - security update","status":"published","published":"2025-06-25T00:00:00Z","modified":"2026-03-09T02:11:39.014641Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-5959-1","title":"thunderbird - security update","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-09T02:10:36.280915Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0201","title":"Updated rootcerts, nss \u0026 firefox packages fix security vulnerabilities","description":"CVE-2025-6424: A use-after-free in FontFaceSet resulted in a potentially\nexploitable crash.\nCVE-2025-6425: An attacker who enumerated resources from the WebCompat\nextension could have obtained a persistent UUID that identified the\nbrowser, and persisted between containers and normal/private browsing\nmode, but not profiles.\nCVE-2025-6429: Firefox could have incorrectly parsed a URL and rewritten\nit to the youtube.com domain when parsing the URL specified in an embed\ntag. This could have bypassed website security checks that restricted\nwhich domains users were allowed to embed.\nCVE-2025-6430: When a file download is specified via the\nContent-Disposition header, that directive would be ignored if the file\nwas included via a \u003cembed\u003e or \u003cobject\u003e tag, potentially making a website\nvulnerable to a cross-site scripting attack.\nWe can't yet ship this update to the armv7hl architecture; we are\ninvestigating the issue and will try to update firefox for armv7hl as soon as\npossible.\n","status":"published","published":"2025-07-02T22:16:24Z","modified":"2026-04-16T04:41:13.451244121Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"MGASA-2025-0228","title":"Updated thunderbird packages fix vulnerabilities","description":"Use-after-free in FontFaceSet. (CVE-2025-6424)\nThe WebCompat WebExtension shipped exposed a persistent UUID.\n(CVE-2025-6425)\nIncorrect parsing of URLs could have allowed embedding of youtube.com.\n(CVE-2025-6429)\nContent-Disposition header ignored when a file is included in an embed\nor object tag. (CVE-2025-6430)\nJavaScript engine only wrote partial return value to stack.\n(CVE-2025-8027)\nLarge branch table could lead to truncated instruction. (CVE-2025-8028)\nJavascript: URLs executed on object and embed tags. (CVE-2025-8029)\nPotential user-assisted code execution in “Copy as cURL” command.\n(CVE-2025-8030)\nIncorrect URL stripping in CSP reports. (CVE-2025-8031)\nXSLT documents could bypass CSP. (CVE-2025-8032)\nIncorrect JavaScript state machine for generators. (CVE-2025-8033)\nMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13,\nThunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1,\nFirefox 141 and Thunderbird 141. (CVE-2025-8034)\nMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13,\nFirefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird\n141. (CVE-2025-8035)\nSandbox escape due to invalid pointer in the Audio/Video: GMP component.\n(CVE-2025-9179)\nSame-origin policy bypass in the Graphics: Canvas2D component.\n(CVE-2025-9180)\nUninitialized memory in the JavaScript Engine component. (CVE-2025-9181)\nMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14,\nThunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2,\nFirefox 142 and Thunderbird 142. (CVE-2025-9185).\nFor the armv7hl architecture this package fixes additional vulnerabilities;\nsee the links below:\nhttps://advisories.mageia.org/MGASA-2025-0197.html\nhttps://advisories.mageia.org/MGASA-2025-0168.html\nhttps://advisories.mageia.org/MGASA-2025-0151.html\nhttps://advisories.mageia.org/MGASA-2025-0126.html\nhttps://advisories.mageia.org/MGASA-2025-0093.html\nhttps://advisories.mageia.org/MGASA-2025-0048.html\nhttps://advisories.mageia.org/MGASA-2025-0010.html\nhttps://advisories.mageia.org/MGASA-2024-0395.html\nhttps://advisories.mageia.org/MGASA-2024-0384.html\nhttps://advisories.mageia.org/MGASA-2024-0365.html\nhttps://advisories.mageia.org/MGASA-2024-0350.html\nhttps://advisories.mageia.org/MGASA-2024-0336.html\nhttps://advisories.mageia.org/MGASA-2024-0332.html\n","status":"published","published":"2025-09-05T18:30:35Z","modified":"2026-04-16T04:41:51.90786647Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15216-1","title":"firefox-esr-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:29.81575Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15312-1","title":"MozillaThunderbird-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-23T04:53:38.157799Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15315-1","title":"libmozjs-128-0-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the libmozjs-128-0-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-23T04:53:38.148717Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15325-1","title":"MozillaFirefox-140.0.2-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-140.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-09T00:00:00Z","modified":"2026-03-23T04:53:39.033181Z","updated_at":"2026-11-02T16:58:37.810934Z"}]},"sources_more":{"osv":10}}