Mozilla has a well-defined process for handling security vulnerabilities based around responsible disclosure.
| Version | Supported |
|---|---|
| v2.x.x | ✅ |
| < v2.0 | ❌ |
If you believe you have found a security vulnerability, you should visit the Mozilla bug bounty program for information on how to submit them.
This Bugzilla template will help you report a security vulnerability directly to our SRE team.