| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 139.0 | 139.0 |
Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability was fixed in Firefox 139 and Thunderbird 139.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free