Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/firefox@138.0.4-1?distro=sid
purl pkg:deb/debian/firefox@138.0.4-1?distro=sid
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-7v6j-9uuc-qkc8 An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. CVE-2025-4919
VCID-8hm6-nz5h-yfcm An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. CVE-2025-4918

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:50:39.497843+00:00 Debian Importer Fixing VCID-7v6j-9uuc-qkc8 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:11:10.419385+00:00 Debian Importer Fixing VCID-8hm6-nz5h-yfcm https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:20:32.112305+00:00 Debian Importer Fixing VCID-7v6j-9uuc-qkc8 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:08:55.421246+00:00 Debian Importer Fixing VCID-8hm6-nz5h-yfcm https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:14:25.254621+00:00 Debian Importer Fixing VCID-8hm6-nz5h-yfcm https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:09:38.912359+00:00 Debian Importer Fixing VCID-7v6j-9uuc-qkc8 https://security-tracker.debian.org/tracker/data/json 38.1.0