CLEANSTART-2024-HC20984

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-HC20984
Upstream
Published
2026-10-31T08:51:23Z
Modified
2026-10-31T16:00:29Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups
Details

Security vulnerability affects the firefox-esr package. A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups.

References

Affected packages

CleanStart / firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/cleanstart/firefox-esr?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.7.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json"

CleanStart / firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/cleanstart/firefox-esr?arch=armv7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.7.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json"

CleanStart / firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/cleanstart/firefox-esr?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.7.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json"

CleanStart / firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/cleanstart/firefox-esr?arch=x86

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.7.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json"

CleanStart / firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/cleanstart/firefox-esr?arch=ppc64le

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.7.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HC20984.json"