| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 128.4.0< 132.0 | 128.4.0132.0 |
| thunderbird | ≥ 129, < 132< 128.4 | 132128.4 |
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free