{"id":"CVE-2025-6429","aliases":["ALSA-2025:10072","ALSA-2025:10073","ALSA-2025:10074","ALSA-2025:10246","DEBIAN-CVE-2025-6429","DLA-4231-1","DLA-4239-1","DSA-5950-1","DSA-5959-1","EUVD-2025-21378","GHSA-8r38-4g4q-hgvw","MGASA-2025-0201","MGASA-2025-0228","OESA-2025-1717","OESA-2025-1718","OESA-2025-1719","OESA-2025-1720","OESA-2025-1782","OESA-2025-1912","RHSA-2025:10072","RHSA-2025:10073","RHSA-2025:10074","RHSA-2025:10159","RHSA-2025:10160","RHSA-2025:10161","RHSA-2025:10163","RHSA-2025:10164","RHSA-2025:10165","RHSA-2025:10166","RHSA-2025:10181","RHSA-2025:10182","RHSA-2025:10183","RHSA-2025:10184","RHSA-2025:10185","RHSA-2025:10186","RHSA-2025:10187","RHSA-2025:10188","RHSA-2025:10195","RHSA-2025:10196","RHSA-2025:10246","RLSA-2025:10072","RLSA-2025:10073","RLSA-2025:10074","RLSA-2025:10195","RLSA-2025:10196","RLSA-2025:10246","SUSE-SU-2025:02122-1","SUSE-SU-2025:02123-1","SUSE-SU-2025:02339-1","SUSE-SU-2025:02368-1","SUSE-SU-2025:02529-1","SUSE-SU-2025:02546-1","SUSE-SU-2025:21170-1","UBUNTU-CVE-2025-6429","USN-7663-1","openSUSE-SU-2025-20135-1","openSUSE-SU-2025:15216-1","openSUSE-SU-2025:15312-1","openSUSE-SU-2025:15315-1","openSUSE-SU-2025:15325-1","openSUSE-SU-2025:20135-1"],"status":"published","title":"Incorrect parsing of URLs could have allowed embedding of youtube.com","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00355,"percentile":0.29437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-116"],"published":"2025-06-24T12:28:00Z","modified":"2026-10-29T11:58:17Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["128.12.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:128.12.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:128.12.0esr-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","fixed_in":["1:128.12.0+build1-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el9_6.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el9_6.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el8_10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.el8_10.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1~deb11u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1~deb11u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1","1:102.10.0-1~deb10u1","1:102.10.0-1~deb11u1","1:102.11.0-1","1:102.11.0-1~deb10u1","1:102.11.0-1~deb11u1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1~deb11u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1~deb11u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250613.00-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.113.0-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.12.0-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.152.188.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-112.265.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-112.265.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0-112.270.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-35.19.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0-112.270.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-35.19.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-150200.8.227.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150200.3.11.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-150200.3.11.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.64-150500.3.7.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-150500.3.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pipewire","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.24-150300.4.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xdg-desktop-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150200.5.8.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.152.193.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140-150200.9.21.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.1.0-150200.8.230.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:128.12.0+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1"],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.12.0-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.0.2-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.14.0-160000.1.1"}]}],"bundled":26}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1970658","tags":["Permissions Required","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-51/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-54/","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-55/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6429","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-51"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-54"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-55"},{"url":"https://github.com/advisories/GHSA-8r38-4g4q-hgvw"},{"url":"https://access.redhat.com/errata/RHSA-2025:10072","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6424","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6425","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6429","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6430","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374555","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374559","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374561","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374562","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-10072.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10073","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-10073.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10074","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10074.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10246","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2372281","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10246.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-5986.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6424.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6425.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6429.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6430.html","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6429","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0201.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34393","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34430","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_113.html","tags":["web"]},{"url":"https://www.mozilla.org/en-US/firefox/128.12.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0228.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34415","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-55/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.14.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6430","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1718","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1719","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1720","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1782","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10072.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6424","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6424","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6425","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6425","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6429","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6429","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6430","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6430","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10073.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10074.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10159","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372281","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5986","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5986","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/#CVE-2025-5986","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10160","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10160.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10161","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10161.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10163","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10163.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10164","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10164.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10165","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10165.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10166","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10166.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10181","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10181.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10182","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10182.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10183","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10183.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10184","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10184.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10185","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10185.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10186","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10186.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10187","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10187.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10188","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10188.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10196","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10196.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10246.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10072","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10073","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10074","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10195","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10196","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10246","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244670","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6430","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502123-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502339-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6436","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502368-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237231","tags":["report"]},{"url":"https://bugzilla.suse.com/1246664","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8040","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521170-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9185","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-6429","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-51/#CVE-2025-6429","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/#CVE-2025-6429","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7663-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-43097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-4919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-6430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-26695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-26696","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6429","title":"Incorrect parsing of URLs could have allowed embedding of youtube.com","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T12:28:00.819Z","modified":"2026-04-13T14:30:42.931Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:32:40.774223Z"}],"euvd":[{"id":"EUVD-2025-21378","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T12:28:00Z","modified":"2026-04-13T14:30:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:28.399811Z"}],"ghsa":[{"id":"GHSA-8r38-4g4q-hgvw","title":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when...","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u003c 140 and Firefox ESR \u003c 128.12.","status":"published","published":"2025-06-26T21:31:06Z","modified":"2025-11-03T21:35:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T15:04:25.4654Z"}],"nvd":[{"id":"CVE-2025-6429","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:23.877Z","modified":"2026-09-30T18:10:00.19Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:11:14.091082Z"}],"osv":[{"id":"CVE-2025-6429","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.","status":"published","published":"2025-06-24T13:15:23.877Z","modified":"2026-10-29T11:12:04.766145316Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:51.851511Z"},{"id":"DEBIAN-CVE-2025-6429","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:23.877Z","modified":"2026-10-01T08:47:40.468403216Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-1717","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.666497485Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1718","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.632828673Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1719","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:23.333656823Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1720","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-04T11:08:48Z","modified":"2026-08-18T01:18:01.848492011Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1782","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Mozilla Firefox up to 139 (Web Browser). It has been rated as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 140 eliminates this vulnerability.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-11T11:08:52Z","modified":"2026-08-18T01:18:52.018398764Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1912","title":"thunderbird security update","description":"Security Fix(es):\n\nA use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6424)\n\nAn attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 115.25, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6425)\n\nFirefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u0026lt; 140, Firefox ESR \u0026lt; 128.12, Thunderbird \u0026lt; 140, and Thunderbird \u0026lt; 128.12.(CVE-2025-6429)\n\nWhen a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026amp;lt;embed\u0026amp;gt;` or `\u0026amp;lt;object\u0026amp;gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u0026lt; 140 and Firefox ESR \u0026lt; 128.12.(CVE-2025-6430)","status":"published","published":"2025-07-25T11:08:59Z","modified":"2026-08-18T01:18:55.766321357Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:10072","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:23Z","modified":"2026-06-30T10:11:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10073","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:24Z","modified":"2026-06-30T10:11:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10074","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:25Z","modified":"2026-06-30T10:11:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10159","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:38Z","modified":"2026-06-30T10:11:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10160","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:39Z","modified":"2026-06-30T10:11:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10161","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:39Z","modified":"2026-06-30T10:11:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10163","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:40Z","modified":"2026-06-30T10:11:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10164","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:40Z","modified":"2026-06-30T10:11:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10165","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:41Z","modified":"2026-06-30T10:11:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10166","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-02T10:03:42Z","modified":"2026-06-30T10:11:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10181","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:44Z","modified":"2026-06-30T10:11:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10182","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:45Z","modified":"2026-06-30T10:11:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10183","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:45Z","modified":"2026-06-30T10:11:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10184","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:46Z","modified":"2026-06-30T10:11:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10185","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:47Z","modified":"2026-06-30T10:11:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10186","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:48Z","modified":"2026-06-30T10:11:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10187","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:48Z","modified":"2026-06-30T10:11:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10188","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2025-07-02T10:03:49Z","modified":"2026-06-30T10:11:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10195","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:54Z","modified":"2026-06-30T10:11:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10196","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:55Z","modified":"2026-06-30T10:11:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10246","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-07-03T10:02:57Z","modified":"2026-06-30T10:11:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RLSA-2025:10072","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:50:17.541518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10073","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:19:25.613568Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10074","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T14:33:28.623561Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10195","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:19:24.595499Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10196","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:59.615715Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10246","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:24.7932Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-6429","description":"Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.","status":"published","published":"2025-06-24T13:15:00Z","modified":"2026-10-28T20:15:57.542978187Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"ALSA-2025:10072","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:31:55.135725986Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10073","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:58:17.048004Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10074","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:02:22.222174942Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10246","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-02T00:00:00Z","modified":"2026-10-29T11:12:04.870444422Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"DLA-4231-1","title":"firefox-esr - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T01:18:47.320307Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DLA-4239-1","title":"thunderbird - security update","status":"published","published":"2025-07-11T00:00:00Z","modified":"2026-03-09T02:10:59.340628Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5950-1","title":"firefox-esr - security update","status":"published","published":"2025-06-25T00:00:00Z","modified":"2026-03-09T02:11:39.014641Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-5959-1","title":"thunderbird - security update","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-09T02:10:36.280915Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0201","title":"Updated rootcerts, nss \u0026 firefox packages fix security vulnerabilities","description":"CVE-2025-6424: A use-after-free in FontFaceSet resulted in a potentially\nexploitable crash.\nCVE-2025-6425: An attacker who enumerated resources from the WebCompat\nextension could have obtained a persistent UUID that identified the\nbrowser, and persisted between containers and normal/private browsing\nmode, but not profiles.\nCVE-2025-6429: Firefox could have incorrectly parsed a URL and rewritten\nit to the youtube.com domain when parsing the URL specified in an embed\ntag. This could have bypassed website security checks that restricted\nwhich domains users were allowed to embed.\nCVE-2025-6430: When a file download is specified via the\nContent-Disposition header, that directive would be ignored if the file\nwas included via a \u003cembed\u003e or \u003cobject\u003e tag, potentially making a website\nvulnerable to a cross-site scripting attack.\nWe can't yet ship this update to the armv7hl architecture; we are\ninvestigating the issue and will try to update firefox for armv7hl as soon as\npossible.\n","status":"published","published":"2025-07-02T22:16:24Z","modified":"2026-04-16T04:41:13.451244121Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"MGASA-2025-0228","title":"Updated thunderbird packages fix vulnerabilities","description":"Use-after-free in FontFaceSet. (CVE-2025-6424)\nThe WebCompat WebExtension shipped exposed a persistent UUID.\n(CVE-2025-6425)\nIncorrect parsing of URLs could have allowed embedding of youtube.com.\n(CVE-2025-6429)\nContent-Disposition header ignored when a file is included in an embed\nor object tag. (CVE-2025-6430)\nJavaScript engine only wrote partial return value to stack.\n(CVE-2025-8027)\nLarge branch table could lead to truncated instruction. (CVE-2025-8028)\nJavascript: URLs executed on object and embed tags. (CVE-2025-8029)\nPotential user-assisted code execution in “Copy as cURL” command.\n(CVE-2025-8030)\nIncorrect URL stripping in CSP reports. (CVE-2025-8031)\nXSLT documents could bypass CSP. (CVE-2025-8032)\nIncorrect JavaScript state machine for generators. (CVE-2025-8033)\nMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13,\nThunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1,\nFirefox 141 and Thunderbird 141. (CVE-2025-8034)\nMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13,\nFirefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird\n141. (CVE-2025-8035)\nSandbox escape due to invalid pointer in the Audio/Video: GMP component.\n(CVE-2025-9179)\nSame-origin policy bypass in the Graphics: Canvas2D component.\n(CVE-2025-9180)\nUninitialized memory in the JavaScript Engine component. (CVE-2025-9181)\nMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14,\nThunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2,\nFirefox 142 and Thunderbird 142. (CVE-2025-9185).\nFor the armv7hl architecture this package fixes additional vulnerabilities;\nsee the links below:\nhttps://advisories.mageia.org/MGASA-2025-0197.html\nhttps://advisories.mageia.org/MGASA-2025-0168.html\nhttps://advisories.mageia.org/MGASA-2025-0151.html\nhttps://advisories.mageia.org/MGASA-2025-0126.html\nhttps://advisories.mageia.org/MGASA-2025-0093.html\nhttps://advisories.mageia.org/MGASA-2025-0048.html\nhttps://advisories.mageia.org/MGASA-2025-0010.html\nhttps://advisories.mageia.org/MGASA-2024-0395.html\nhttps://advisories.mageia.org/MGASA-2024-0384.html\nhttps://advisories.mageia.org/MGASA-2024-0365.html\nhttps://advisories.mageia.org/MGASA-2024-0350.html\nhttps://advisories.mageia.org/MGASA-2024-0336.html\nhttps://advisories.mageia.org/MGASA-2024-0332.html\n","status":"published","published":"2025-09-05T18:30:35Z","modified":"2026-04-16T04:41:51.90786647Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15216-1","title":"firefox-esr-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:29.81575Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15312-1","title":"MozillaThunderbird-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-23T04:53:38.157799Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15315-1","title":"libmozjs-128-0-128.12.0-1.1 on GA media","description":"These are all security issues fixed in the libmozjs-128-0-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-06T00:00:00Z","modified":"2026-03-23T04:53:38.148717Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15325-1","title":"MozillaFirefox-140.0.2-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-140.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-09T00:00:00Z","modified":"2026-03-23T04:53:39.033181Z","updated_at":"2026-11-02T16:58:37.810934Z"}]},"sources_more":{"osv":10}}