| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 136.0 | 136.0 |
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245). This vulnerability was fixed in Firefox 136.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free