CVE-2025-5271

Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability affects Firefox < 139 and Thunderbird < 139. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1920348