| Package | Affected versions | Patched versions |
|---|---|---|
| vpn | < 2.7.1 | 2.7.1 |
Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free