There was discovered a use after free bug in browser.c in the esbrowserget_variant function
{ "urgency": "not yet assigned" }