= 1.15.0
≤ 1.14.10
Tridactyl before 1.16.0 allows fake key events.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.