| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 140.0 | 140.0 |
| thunderbird | < 140.0 | 140.0 |
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free