| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 128.11.0< 139.0 | 128.11.0139.0 |
Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free