Search for packages
| purl | pkg:mozilla/Firefox%20ESR@115.20.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bzgb-mdsk-yua6 | An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. |
CVE-2025-1009
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:16:47.916806+00:00 | Mozilla Importer | Fixing | VCID-bzgb-mdsk-yua6 | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2025/mfsa2025-08.yml | 38.0.0 |