firefox_extension vulnerabilities

CVEs whose affected-version data names the firefox_extension package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120627High· 7.5

6d ago

CVE-2026-120627

The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This …

▾ TwilightPrivate Internet Access · Firefox extensionEPSS 0.29%via CVEORG