When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-22763.json"
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "96.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "91.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "91.6"
}
]
}
]