CVE-2021-23968 affects multiple packages. If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. See references for individual vulnerability details.