| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 76.0 | 76.0 |
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have been blocked, albeit with a unique opaque origin. This vulnerability affects Firefox < 76.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free