| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 128.11.0< 139.0 | 128.11.0139.0 |
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free