← All credits
Kagami Rosylight
2 vulnerability records and advisories credit this contributor.
CVE-2026-74972
Information disclosure in the DOM: Push Subscriptions component
CVE-2024-10466
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.