Homepage

librewolf

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the librewolf package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Use After Free

<98.0-r0
  • M
Use After Free

<98.0-r0
  • M
Race Condition

<97.0-r0
  • M
CVE-2022-26383

<98.0-r0
  • M
CVE-2022-22749

<97.0-r0
  • M
CVE-2022-22748

<97.0-r0
  • H
Out-of-bounds Write

<97.0-r0
  • M
Information Exposure

<97.0-r0
  • H
Out-of-bounds Write

<98.0-r0
  • M
CVE-2022-28287

<99.0-r0
  • H
Operation on a Resource after Expiration or Release

<97.0-r0
  • H
Out-of-bounds Write

<99.0-r0
  • H
Use After Free

<97.0-r0
  • M
Improper Certificate Validation

<97.0-r0
  • H
Out-of-bounds Write

<99.0-r0
  • H
Out-of-bounds Write

<97.0-r0
  • M
Origin Validation Error

<97.0-r0
  • C
XML Injection

<97.0-r0
  • H
Uncontrolled Search Path Element

<97.0-r0
  • M
CVE-2022-22743

<97.0-r0
  • H
Inefficient Regular Expression Complexity

<99.0-r0
  • M
Use After Free

<99.0-r0
  • C
CVE-2022-22759

<97.0-r0
  • C
CVE-2022-26384

<98.0-r0
  • H
CVE-2022-28284

<99.0-r0
  • H
CVE-2022-22741

<97.0-r0
  • H
Cleartext Transmission of Sensitive Information

<97.0-r0
  • M
CVE-2022-22762

<97.0-r0
  • M
CVE-2022-28283

<99.0-r0
  • H
Time-of-check Time-of-use (TOCTOU)

<97.0-r0
  • M
CVE-2022-22750

<97.0-r0
  • M
CVE-2022-22739

<97.0-r0
  • H
CVE-2022-22761

<97.0-r0
  • M
Out-of-bounds Read

<97.0-r0
  • M
Incorrect Authorization

<97.0-r0
  • C
Use After Free

<97.0.2-r0
  • M
Cross-site Scripting (XSS)

<95.0-r0
  • M
Cross-site Scripting (XSS)

<95.0-r0
  • H
Improper Encoding or Escaping of Output

<97.0-r0
  • H
CVE-2021-38510

<94.0-r0
  • H
Out-of-bounds Write

<97.0-r0
  • H
Use After Free

<97.0.2-r0
  • M
Missing Release of Resource after Effective Lifetime

<92.0.1-r0
  • M
CVE-2021-38491

<92.0.1-r0
  • M
Origin Validation Error

<94.0-r0
  • H
Use After Free

<90.0-r0
  • H
Time-of-check Time-of-use (TOCTOU)

<98.0-r0
  • M
Out-of-bounds Read

<99.0-r0
  • H
Out-of-Bounds

<89.0-r0
  • M
CVE-2021-29983

<92.0.1-r0
  • M
Origin Validation Error

<93.0-r0
  • H
Out-of-bounds Write

<97.0-r0
  • M
Information Exposure

<98.0-r0
  • M
Exposure of Resource to Wrong Sphere

<94.0-r0
  • M
CVE-2021-23996

<88.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<99.0-r0
  • M
Incorrect Resource Transfer Between Spheres

<89.0-r0
  • M
Improper Resource Shutdown or Release

<89.0-r0
  • H
CVE-2021-23978

<87.0-r0
  • H
Improper Restriction of Rendered UI Layers or Frames

<87.0-r0
  • M
Externally Controlled Reference to a Resource in Another Sphere

<89.0-r0
  • H
Race Condition

<97.0-r0
  • M
Exposure of Resource to Wrong Sphere

<87.0-r0
  • M
Information Exposure

<87.0-r0
  • M
Exposure of Resource to Wrong Sphere

<88.0-r0
  • H
CVE-2022-22756

<97.0-r0
  • H
Incorrect Type Conversion or Cast

<95.0-r0
  • H
CVE-2021-29981

<92.0.1-r0
  • H
HTTP Request Smuggling

<92.0.1-r0
  • H
Improper Privilege Management

<88.0-r0
  • M
Race Condition

<95.0-r0
  • M
Use After Free

<99.0-r0
  • H
CVE-2021-23972

<87.0-r0
  • H
Out-of-bounds Write

<99.0-r0
  • M
Missing Authorization

<87.0-r0
  • H
Out-of-bounds Write

<97.0-r0
  • H
Integer Overflow or Wraparound

<88.0-r0
  • H
Out-of-Bounds

<87.0-r0
  • M
CVE-2021-23971

<87.0-r0
  • H
CVE-2021-23957

<85.0-r0
  • M
Information Exposure

<95.0-r0
  • H
Out-of-Bounds

<85.0-r0
  • M
CVE-2022-22745

<97.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<94.0-r0
  • H
Use After Free

<95.0-r0
  • C
Race Condition

<93.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<94.0-r0
  • H
CVE-2021-38499

<93.0-r0
  • M
CVE-2021-29975

<90.0-r0
  • H
Race Condition

<92.0.1-r0
  • H
Incorrect Conversion between Numeric Types

<88.0-r0
  • M
Incorrect Calculation

<88.0-r0
  • H
Out-of-bounds Write

<92.0.1-r0
  • H
Operation on a Resource after Expiration or Release

<88.0-r0
  • M
Authentication Bypass

<87.0-r0
  • M
CVE-2021-23974

<87.0-r0
  • L
CVE-2021-24000

<88.0-r0
  • H
Out-of-bounds Write

<90.0-r0
  • H
CVE-2021-23962

<85.0-r0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<85.0-r0
  • M
Excessive Iteration

<95.0-r0
  • H
Use After Free

<94.0-r0
  • H
Missing Initialization of Resource

<92.0.1-r0
  • H
Use After Free

<90.0-r0
  • H
Out-of-bounds Write

<90.0-r0
  • H
CVE-2021-38501

<93.0-r0
  • M
Insufficient Verification of Data Authenticity

<89.0-r0
  • M
Information Exposure

<95.0-r0
  • C
Incorrect Authorization

<94.0-r0
  • M
Insufficient Verification of Data Authenticity

<88.0-r0
  • M
CVE-2021-38492

<92.0.1-r0
  • H
CVE-2021-29993

<92.0.1-r0
  • M
Reachable Assertion

<87.0-r0
  • H
Missing Initialization of Resource

<88.0-r0
  • M
CVE-2020-26961

<83.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<85.0-r0
  • H
Out-of-bounds Write

<83.0-r0
  • H
CVE-2021-38500

<93.0-r0
  • M
Missing Authorization

<89.0-r0
  • M
CVE-2021-23956

<85.0-r0
  • H
Out-of-Bounds

<92.0.1-r0
  • M
CVE-2021-43541

<95.0-r0
  • M
Incorrect Authorization

<89.0-r0
  • H
CVE-2021-29984

<92.0.1-r0
  • H
Arbitrary Argument Injection

<88.0-r0
  • H
Improper Privilege Management

<80.0-r0
  • M
CVE-2020-26967

<83.0-r0
  • M
Cross-site Scripting (XSS)

<83.0-r0
  • M
Cross-site Scripting (XSS)

<88.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<94.0-r0
  • H
Out-of-Bounds

<87.0-r0
  • H
Use After Free

<78.0-r0
  • H
Use After Free

<78.0-r0
  • M
Improper Locking

<80.0-r0
  • M
Out-of-Bounds

<87.0-r0
  • M
Information Exposure

<77.0-r0
  • C
Improper Input Validation

<76.0-r0
  • M
Information Exposure

<80.0-r0
  • M
Use After Free

<77.0-r0
  • H
CVE-2021-38494

<92.0.1-r0
  • H
Buffer Overflow

<81.0-r0
  • M
CVE-2021-23969

<87.0-r0
  • L
Improper Input Validation

<76.0-r0
  • H
Out-of-Bounds

<89.0-r0
  • M
CVE-2021-43540

<95.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<95.0-r0
  • M
Improper Restriction of Excessive Authentication Attempts

<92.0.1-r0
  • H
Use After Free

<93.0-r0
  • H
Out-of-Bounds

<92.0.1-r0
  • H
Interpretation Conflict

<92.0.1-r0
  • M
CVE-2021-29974

<90.0-r0
  • H
CVE-2020-35112

<84.0.1-r0
  • H
Race Condition

<88.0.1-r0
  • H
Use After Free

<92.0.1-r0
  • M
Inadequate Encryption Strength

<87.0-r0
  • M
Information Exposure

<87.0-r0
  • M
CVE-2020-35111

<84.0.1-r0
  • H
Out-of-bounds Write

<84.0.1-r0
  • H
Use After Free

<93.0-r0
  • H
Out-of-bounds Write

<90.0-r0
  • M
Reliance on Cookies without Validation and Integrity Checking

<83.0-r0
  • H
Out-of-Bounds

<87.0-r0
  • H
Out-of-Bounds

<88.0-r0
  • M
CVE-2020-15680

<82.0-r0
  • M
Improper Preservation of Permissions

<85.0-r0
  • H
Out-of-Bounds

<85.0-r0
  • H
Out-of-Bounds

<87.0-r0
  • M
CVE-2020-26977

<84.0.1-r0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<79.0-r0
  • M
Use of a Broken or Risky Cryptographic Algorithm

<78.0-r0
  • H
Release of Invalid Pointer or Reference

<81.0-r0
  • H
Uncontrolled Search Path Element

<78.0-r0
  • M
Arbitrary Code Injection

<77.0-r0
  • H
CVE-2020-15681

<82.0-r0
  • C
Out-of-Bounds

<76.0-r0
  • M
Out-of-bounds Read

<78.0-r0
  • M
Origin Validation Error

<87.0-r0
  • H
Out-of-bounds Write

<83.0-r0
  • H
Arbitrary Code Injection

<76.0-r0
  • C
Use After Free

<84.0.1-r0
  • M
Improper Initialization

<83.0-r0
  • M
Open Redirect

<84.0.1-r0
  • M
Time-of-check Time-of-use (TOCTOU)

<87.0-r0
  • H
Improper Input Validation

<76.0-r0
  • H
Out-of-bounds Write

<83.0-r0
  • H
Use After Free

<82.0.3-r0
  • M
CVE-2020-26954

<83.0-r0
  • C
CVE-2020-15683

<82.0-r0
  • M
Use of a Broken or Risky Cryptographic Algorithm

<80.0-r0
  • H
Use After Free

<83.0-r0
  • H
Unrestricted Upload of File with Dangerous Type

<80.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<83.0-r0
  • M
CVE-2020-6514

<79.0-r0
  • M
Information Exposure

<77.0-r0
  • M
Incorrect Default Permissions

<78.0-r0
  • M
Cross-site Scripting (XSS)

<81.0-r0
  • H
Use After Free

<78.0-r0
  • H
CVE-2020-12409

<77.0-r0
  • M
CVE-2020-26978

<84.0.1-r0
  • C
Out-of-bounds Write

<83.0-r0
  • M
Cross-site Scripting (XSS)

<85.0-r0
  • M
CVE-2020-26963

<83.0-r0
  • M
CVE-2020-26964

<83.0-r0
  • H
Out-of-bounds Write

<84.0.1-r0
  • H
Use After Free

<83.0-r0
  • C
Out-of-Bounds

<82.0-r0
  • H
Use After Free

<82.0-r0
  • M
CVE-2020-6829

<80.0-r0
  • H
Release of Invalid Pointer or Reference

<80.0-r0
  • H
CVE-2021-23961

<85.0-r0
  • M
Improper Check for Unusual or Exceptional Conditions

<79.0-r0
  • M
Incorrect Default Permissions

<78.0-r0
  • M
Improper Certificate Validation

<78.0-r0
  • H
Race Condition

<76.0-r0
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<79.0-r0
  • C
Out-of-Bounds

<76.0-r0
  • M
CVE-2020-16012

<83.0-r0
  • H
CVE-2021-23960

<85.0-r0
  • M
Exposure of Resource to Wrong Sphere

<85.0-r0
  • H
CVE-2020-26973

<84.0.1-r0
  • M
Improper Cross-boundary Removal of Sensitive Data

<83.0-r0
  • M
CVE-2020-26976

<84.0.1-r0
  • M
Information Exposure

<80.0-r0
  • M
CVE-2020-26966

<83.0-r0
  • M
CVE-2020-15653

<79.0-r0
  • H
Uncontrolled Search Path Element

<79.0-r0
  • M
Incorrect Authorization

<80.0-r0
  • M
CVE-2020-26975

<84.0.1-r0
  • M
Out-of-bounds Read

<78.0-r0
  • H
Out-of-bounds Write

<78.0-r0
  • H
Double Free

<74.0.1-r0
  • C
Out-of-Bounds

<74.0-r0
  • M
Cross-site Scripting (XSS)

<70.0-r0
  • H
Use After Free

<74.0-r0
  • M
CVE-2023-5723

<119.0-r0
  • M
Cross-site Scripting (XSS)

<102.0-r0
  • H
Use After Free

<74.0.1-r0
  • H
CVE-2022-34483

<102.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<119.0-r0
  • M
Cross-site Scripting (XSS)

<101.0-r0
  • C
Use After Free

<102.0-r0
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<100.0.2-r0
  • M
Cross-site Scripting (XSS)

<70.0-r0
  • M
Cross-site Scripting (XSS)

<102.0-r0
  • H
Out-of-bounds Write

<84.0.1-r0
  • H
Out-of-bounds Write

<84.0.1-r0
  • M
Cross-site Scripting (XSS)

<83.0-r0
  • C
Improper Input Validation

<76.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<83.0-r0
  • M
Information Exposure

<84.0.1-r0
  • H
Use After Free

<81.0-r0
  • H
Use After Free

<84.0.2-r0
  • M
CVE-2020-15665

<80.0-r0
  • M
Origin Validation Error

<82.0-r0
  • C
Deserialization of Untrusted Data

<76.0-r0
  • H
Release of Invalid Pointer or Reference

<81.0-r0
  • H
Use After Free

<79.0-r0
  • H
Out-of-bounds Write

<75.0-r0
  • H
Out-of-Bounds

<78.0-r0
  • C
Out-of-Bounds

<74.0-r0
  • M
Origin Validation Error

<79.0-r0
  • M
Cross-site Scripting (XSS)

<71.0.1-r0
  • H
Out-of-bounds Write

<70.0-r0
  • C
Improper Privilege Management

<75.0-r0
  • H
Out-of-Bounds

<77.0-r0
  • H
Buffer Overflow

<71.0.1-r0
  • H
CVE-2023-5724

<119.0-r0
  • H
Insufficient Verification of Data Authenticity

<77.0-r0
  • C
CVE-2020-15684

<82.0-r0
  • C
Out-of-bounds Write

<103.0-r0
  • M
Uncontrolled Search Path Element

<103.0-r0
  • M
CVE-2022-34472

<102.0-r0
  • M
Authentication Bypass

<74.0-r0
  • H
Out-of-bounds Write

<79.0-r0
  • M
Cross-site Scripting (XSS)

<70.0-r0
  • C
CVE-2022-34476

<102.0-r0
  • H
Out-of-Bounds

<78.0-r0
  • M
CVE-2023-5729

<119.0-r0
  • M
CVE-2022-29916

<100.0-r0
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<100.0.2-r0
  • C
Out-of-bounds Read

<101.0-r0
  • M
Improper Validation of Array Index

<101.0-r0
  • M
Authentication Bypass

<74.0-r0
  • M
Origin Validation Error

<70.0-r0
  • M
Improper Input Validation

<70.0-r0
  • C
Out-of-bounds Write

<119.0-r0
  • H
Use After Free

<74.0-r0
  • H
CVE-2023-5728

<119.0-r0
  • H
CVE-2022-36319

<103.0-r0
  • M
CVE-2022-36315

<103.0-r0
  • M
CVE-2022-36317

<103.0-r0
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<102.0-r0
  • H
Out-of-bounds Write

<70.0-r0
  • H
Use of Uninitialized Resource

<101.0-r0
  • H
Improper Certificate Validation

<102.0-r0
  • M
CVE-2022-31742

<101.0-r0
  • M
CVE-2022-34471

<102.0-r0
  • H
Buffer Overflow

<70.0-r0
  • M
Open Redirect

<81.0-r0
  • C
Buffer Overflow

<76.0-r0
  • M
CVE-2020-6813

<74.0-r0
  • M
Information Exposure

<76.0-r0
  • M
Out-of-bounds Read

<74.0-r0
  • H
Arbitrary Code Injection

<74.0-r0
  • H
Information Exposure

<74.0-r0
  • M
Improper Input Validation

<71.0.1-r0
  • M
Race Condition

<70.0-r0
  • C
Out-of-bounds Write

<119.0-r0
  • H
Use After Free

<70.0-r0
  • M
Information Exposure

<79.0-r0
  • H
Access of Uninitialized Pointer

<102.0-r0
  • M
Race Condition

<103.0-r0
  • H
CVE-2022-31739

<101.0-r0
  • M
Cross-site Scripting (XSS)

<71.0.1-r0
  • H
CVE-2022-31740

<101.0-r0
  • M
CVE-2022-34479

<102.0-r0
  • C
Out-of-bounds Write

<102.0-r0
  • H
Integer Overflow or Wraparound

<102.0-r0
  • C
Out-of-Bounds

<75.0-r0
  • H
Out-of-Bounds

<75.0-r0
  • M
Improper Authentication

<71.0.1-r0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<71.0.1-r0
  • M
Incorrect Default Permissions

<70.0-r0
  • H
Out-of-bounds Read

<70.0-r0
  • C
Improper Authentication

<68.0.2-r0
  • H
Use After Free

<70.0-r0
  • M
Open Redirect

<103.0-r0
  • M
CVE-2022-34478

<102.0-r0
  • H
Out-of-bounds Write

<103.0-r0
  • H
CVE-2022-34477

<102.0-r0
  • H
Out-of-bounds Read

<74.0-r0
  • H
Use After Free

<101.0-r0
  • M
Information Exposure

<74.0-r0
  • H
Use After Free

<102.0-r0
  • M
Cross-site Scripting (XSS)

<101.0-r0
  • C
CVE-2022-31748

<101.0-r0
  • H
CVE-2022-34482

<102.0-r0
  • M
CVE-2022-29915

<100.0-r0
  • C
Out-of-bounds Write

<101.0-r0
  • C
Out-of-bounds Write

<100.0-r0
  • H
Incorrect Default Permissions

<100.0-r0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<71.0.1-r0
  • H
Out-of-bounds Write

<71.0.1-r0
  • L
Session Fixation

<75.0-r0
  • M
Information Exposure

<119.0-r0
  • M
CVE-2023-5726

<119.0-r0
  • H
CVE-2022-34468

<102.0-r0
  • M
CVE-2023-5727

<119.0-r0
  • C
Out-of-Bounds

<75.0-r0
  • M
CVE-2023-5725

<119.0-r0
  • M
Authentication Bypass

<101.0-r0
  • M
Open Redirect

<102.0-r0
  • C
CVE-2022-31736

<101.0-r0
  • M
Open Redirect

<100.0-r0
  • M
Improper Restriction of Rendered UI Layers or Frames

<100.0-r0
  • H
Out-of-bounds Write

<100.0-r0
  • M
Open Redirect

<100.0-r0
  • M
CVE-2022-29914

<100.0-r0