attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process
Details
Security vulnerability affects the mozjs115 package. An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process.