mozillaa vulnerability