Threats affecting pkg:npm/@hoppscotch/js-sandbox

CVE-2026-117911 is a use-after-free vulnerability in the Audio/Video: Playback component of Mozilla Firefox. This vulnerability has been addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The issue could potentially allow for memory corruption leading to high impact consequences if exploited.

CVE-2026-117910 is a vulnerability involving an invalid pointer in the JavaScript Engine component of Mozilla Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact but there are no known exploits in the wild as of the advisory date.

CVE-2026-117909 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Mozilla Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla.

CVE-2026-117908 is a use-after-free vulnerability in the Graphics: ImageLib component of Mozilla Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is classified with high impact by Mozilla.

CVE-2026-117907 is a use-after-free vulnerability in the Networking component of Mozilla Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is classified with high impact by Mozilla. No known exploits in the wild have been reported.

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.