API

A user could enter an unsafe URL in a text field, press enter, and cause a use-after-free resulting in a potentially exploitable crash.

If a user had a malicious site set as their preferred email provider through an add-on like Preference synchronizer, and then installed an add-

This issue has been fixed in Firefox version 101. In Firefox  101, the Performance API incorrectly returned false when the user navigated from an origin

While running in VE, an attacker may be able to access iControl REST endpoints with an unauthenticated user, bypassing VE restrictions. Exploits of VE, like

If you run Rails or Sinatra apps, it’s very likely you’ve relied on Rack—the foundation for most Ruby web applications. In 2022,