An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "15.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "15.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "12.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "15.0"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-30897.json"