CVE-2025-6429

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 140 Firefox ESR versions prior to 128.12

Description: The issue arises from incorrect URL parsing when handling an embed tag, potentially rewriting the URL to a specific domain, such as youtube.com, and bypassing security checks that restrict embedding from certain domains.

Recommendations: For Firefox versions prior to 140, update to version 140 or later. For Firefox ESR versions prior to 128.12, update to version 128.12 or later.