| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 129.0 | 129.0 |
| firefox esr | = 128.0< 115.14.0 | 115.14.0 |
| thunderbird | = 128.0.1< 115.14.0 | 115.14.0 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free