Masato Kinugawa

In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 12

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: firefox security update