[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-12399":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":69,"related":70,"reserved_at":9,"published_at":78,"modified_at":79,"state":80,"summary":81,"references_raw":90,"kevs":134,"epss":135,"epss_history":138,"metrics":398,"affected":409},"CVE-2020-12399","NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird \u003C 68.9.0, Firefox \u003C 77, and Firefox ESR \u003C 68.9.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-203","Observable Discrepancy","The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-189","Black Box Reverse Engineering",[],[],[],[],[27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67],{"_key":28},"SUSE-SU-2020:1677-1",{"_key":30},"RHSA-2020:3280",{"_key":32},"SUSE-SU-2020:14418-1",{"_key":34},"SUSE-SU-2020:1839-1",{"_key":36},"OPENSUSE-SU-2020:0854-1",{"_key":38},"OPENSUSE-SU-2024:10600-1",{"_key":40},"OPENSUSE-SU-2024:11058-1",{"_key":42},"OPENSUSE-SU-2024:14572-1",{"_key":44},"DLA-2243-1",{"_key":46},"DLA-2247-1",{"_key":48},"DLA-2266-1",{"_key":50},"DLA-2388-1",{"_key":52},"DSA-4695-1",{"_key":54},"DSA-4702-1",{"_key":56},"DSA-4726-1",{"_key":58},"UBUNTU-CVE-2020-12399",{"_key":60},"USN-4383-1",{"_key":62},"USN-4397-1",{"_key":64},"USN-4397-2",{"_key":66},"USN-4421-1",{"_key":68},"DEBIAN-CVE-2020-12399",[],[71,72,73,74,75,76,77],{"_key":28},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},"2020-07-09T14:52:16.000Z","2024-08-04T11:56:51.648Z","Modified",{"cisa_kev":82,"cisa_ransomware":82,"cisa_vendor":9,"epss_severity":83,"epss_score":84,"severity":85,"severity_score":86,"severity_version":87,"severity_source":88,"severity_vector":89,"severity_status":80},false,"low",0.0009,"medium",4.4,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",[91,98,102,106,112,118,123,128],{"url":92,"sources":93,"tags":95},"https://www.mozilla.org/security/advisories/mfsa2020-20/",[94,88],"cve.org",[96,97],"X Refsource MISC","Vendor Advisory",{"url":99,"sources":100,"tags":101},"https://www.mozilla.org/security/advisories/mfsa2020-21/",[94,88],[96,97],{"url":103,"sources":104,"tags":105},"https://www.mozilla.org/security/advisories/mfsa2020-22/",[94,88],[96,97],{"url":107,"sources":108,"tags":109},"https://bugzilla.mozilla.org/show_bug.cgi?id=1631576",[94,88],[96,110,111,97],"Issue Tracking","Permissions Required",{"url":113,"sources":114,"tags":115},"https://www.debian.org/security/2020/dsa-4726",[94,88],[97,116,117],"X Refsource DEBIAN","Third Party Advisory",{"url":119,"sources":120,"tags":121},"https://usn.ubuntu.com/4421-1/",[94,88],[97,122,117],"X Refsource UBUNTU",{"url":124,"sources":125,"tags":126},"https://security.gentoo.org/glsa/202007-49",[94,88],[97,127,117],"X Refsource GENTOO",{"url":129,"sources":130,"tags":131},"https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html",[94,88],[132,133,117],"Mailing List","X Refsource MLIST",[],{"date":136,"score":84,"percentile":137},"2026-06-04",0.25561,[139,143,146,149,151,154,157,160,163,166,169,172,175,178,180,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,234,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,292,295,298,301,303,306,309,312,314,317,319,321,324,327,330,333,336,339,342,345,348,350,352,355,358,361,364,367,370,372,374,377,380,383,386,389,392,395],{"date":140,"score":141,"percentile":142},"2025-11-04",0.00101,0.28626,{"date":144,"score":141,"percentile":145},"2025-11-05",0.28598,{"date":147,"score":141,"percentile":148},"2025-11-06",0.28611,{"date":150,"score":141,"percentile":148},"2025-11-07",{"date":152,"score":141,"percentile":153},"2025-11-08",0.28614,{"date":155,"score":141,"percentile":156},"2025-11-09",0.28584,{"date":158,"score":141,"percentile":159},"2025-11-10",0.28563,{"date":161,"score":141,"percentile":162},"2025-11-11",0.28588,{"date":164,"score":141,"percentile":165},"2025-11-12",0.28633,{"date":167,"score":141,"percentile":168},"2025-11-13",0.28642,{"date":170,"score":141,"percentile":171},"2025-11-14",0.28636,{"date":173,"score":141,"percentile":174},"2025-11-15",0.28632,{"date":176,"score":141,"percentile":177},"2025-11-16",0.28602,{"date":179,"score":141,"percentile":156},"2025-11-17",{"date":181,"score":182,"percentile":183},"2025-11-18",0.00085,0.20636,{"date":185,"score":182,"percentile":186},"2025-11-19",0.20645,{"date":188,"score":182,"percentile":189},"2025-11-20",0.20615,{"date":191,"score":141,"percentile":192},"2025-11-21",0.2862,{"date":194,"score":141,"percentile":195},"2025-11-22",0.2863,{"date":197,"score":141,"percentile":198},"2025-11-23",0.28597,{"date":200,"score":141,"percentile":201},"2025-11-24",0.28571,{"date":203,"score":141,"percentile":204},"2025-11-25",0.28567,{"date":206,"score":141,"percentile":207},"2025-11-26",0.28566,{"date":209,"score":141,"percentile":210},"2025-11-27",0.28577,{"date":212,"score":141,"percentile":213},"2025-11-28",0.2855,{"date":215,"score":141,"percentile":216},"2025-11-29",0.28538,{"date":218,"score":141,"percentile":219},"2025-11-30",0.28515,{"date":221,"score":141,"percentile":222},"2025-12-01",0.28575,{"date":224,"score":141,"percentile":225},"2025-12-02",0.28599,{"date":227,"score":141,"percentile":228},"2025-12-03",0.28605,{"date":230,"score":141,"percentile":231},"2025-12-04",0.28534,{"date":233,"score":141,"percentile":201},"2025-12-05",{"date":235,"score":141,"percentile":201},"2025-12-06",{"date":237,"score":141,"percentile":238},"2025-12-07",0.28541,{"date":240,"score":141,"percentile":241},"2025-12-08",0.28553,{"date":243,"score":141,"percentile":244},"2025-12-09",0.28609,{"date":246,"score":141,"percentile":247},"2025-12-10",0.28682,{"date":249,"score":141,"percentile":250},"2025-12-11",0.2871,{"date":252,"score":141,"percentile":253},"2025-12-12",0.28729,{"date":255,"score":141,"percentile":256},"2025-12-13",0.28725,{"date":258,"score":141,"percentile":259},"2025-12-14",0.28691,{"date":261,"score":141,"percentile":262},"2025-12-15",0.28657,{"date":264,"score":141,"percentile":265},"2025-12-16",0.28667,{"date":267,"score":141,"percentile":268},"2025-12-17",0.28727,{"date":270,"score":141,"percentile":271},"2025-12-18",0.28782,{"date":273,"score":141,"percentile":274},"2025-12-19",0.28795,{"date":276,"score":141,"percentile":277},"2025-12-20",0.2876,{"date":279,"score":141,"percentile":280},"2025-12-21",0.28713,{"date":282,"score":141,"percentile":283},"2025-12-22",0.28676,{"date":285,"score":141,"percentile":286},"2025-12-23",0.28645,{"date":288,"score":141,"percentile":289},"2025-12-24",0.28654,{"date":291,"score":141,"percentile":268},"2025-12-25",{"date":293,"score":141,"percentile":294},"2025-12-26",0.2872,{"date":296,"score":141,"percentile":297},"2025-12-27",0.28714,{"date":299,"score":141,"percentile":300},"2025-12-28",0.28634,{"date":302,"score":141,"percentile":228},"2025-12-29",{"date":304,"score":141,"percentile":305},"2025-12-30",0.286,{"date":307,"score":141,"percentile":308},"2025-12-31",0.28665,{"date":310,"score":141,"percentile":311},"2026-01-01",0.28785,{"date":313,"score":141,"percentile":271},"2026-01-02",{"date":315,"score":141,"percentile":316},"2026-01-03",0.28762,{"date":318,"score":141,"percentile":168},"2026-01-04",{"date":320,"score":141,"percentile":174},"2026-01-05",{"date":322,"score":141,"percentile":323},"2026-01-06",0.28646,{"date":325,"score":141,"percentile":326},"2026-01-07",0.28674,{"date":328,"score":141,"percentile":329},"2026-01-08",0.28708,{"date":331,"score":141,"percentile":332},"2026-01-09",0.28697,{"date":334,"score":141,"percentile":335},"2026-01-10",0.28686,{"date":337,"score":141,"percentile":338},"2026-01-11",0.28664,{"date":340,"score":141,"percentile":341},"2026-01-12",0.28616,{"date":343,"score":141,"percentile":344},"2026-01-13",0.28593,{"date":346,"score":141,"percentile":347},"2026-01-14",0.28638,{"date":349,"score":141,"percentile":347},"2026-01-15",{"date":351,"score":141,"percentile":265},"2026-01-16",{"date":353,"score":141,"percentile":354},"2026-01-17",0.2867,{"date":356,"score":141,"percentile":357},"2026-01-18",0.28621,{"date":359,"score":141,"percentile":360},"2026-01-19",0.28586,{"date":362,"score":141,"percentile":363},"2026-01-20",0.2857,{"date":365,"score":141,"percentile":366},"2026-01-21",0.28507,{"date":368,"score":141,"percentile":369},"2026-01-22",0.2848,{"date":371,"score":141,"percentile":241},"2026-01-23",{"date":373,"score":141,"percentile":238},"2026-01-24",{"date":375,"score":141,"percentile":376},"2026-01-25",0.28464,{"date":378,"score":141,"percentile":379},"2026-01-26",0.28379,{"date":381,"score":141,"percentile":382},"2026-01-27",0.2836,{"date":384,"score":141,"percentile":385},"2026-01-28",0.28346,{"date":387,"score":141,"percentile":388},"2026-01-29",0.283,{"date":390,"score":141,"percentile":391},"2026-01-30",0.28291,{"date":393,"score":141,"percentile":394},"2026-01-31",0.28292,{"date":396,"score":141,"percentile":397},"2026-02-01",0.28361,[399],{"source":88,"cvss_v2_0":400,"cvss_v3_0":9,"cvss_v3_1":405,"cvss_v4_0":9},{"baseScore":401,"baseSeverity":9,"vectorString":402,"impactScore":403,"exploitabilityScore":404},1.2,"AV:L/AC:H/Au:N/C:P/I:N/A:N",2.9,1.9,{"baseScore":86,"baseSeverity":406,"vectorString":89,"impactScore":407,"exploitabilityScore":408},"MEDIUM",6,2.1,[410,419,434,444],{"ecosystem":9,"name":411,"vendor":412,"product":413,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":415},"debian linux","debian","debian_linux","o",[416],{"version":417,"is_range":82,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0","cpe",{"ecosystem":9,"name":420,"vendor":421,"product":420,"cpe_part":422,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":423},"firefox","mozilla","a",[424,429],{"version":425,"is_range":426,"range_type":418,"version_start":9,"version_start_type":9,"version_end":427,"version_end_type":428,"fixed_in":9},"lt77.0",true,"77.0","excluding",{"version":430,"is_range":426,"range_type":94,"version_start":431,"version_start_type":432,"version_end":433,"version_end_type":428,"fixed_in":9},">= unspecified, \u003C 77","unspecified","including","77",{"ecosystem":9,"name":435,"vendor":421,"product":436,"cpe_part":422,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":437},"firefox esr","firefox_esr",[438,441],{"version":439,"is_range":426,"range_type":418,"version_start":9,"version_start_type":9,"version_end":440,"version_end_type":428,"fixed_in":9},"lt68.9.0","68.9.0",{"version":442,"is_range":426,"range_type":94,"version_start":431,"version_start_type":432,"version_end":443,"version_end_type":428,"fixed_in":9},">= unspecified, \u003C 68.9","68.9",{"ecosystem":9,"name":445,"vendor":421,"product":446,"cpe_part":422,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":447},"Thunderbird","thunderbird",[448,449],{"version":439,"is_range":426,"range_type":418,"version_start":9,"version_start_type":9,"version_end":440,"version_end_type":428,"fixed_in":9},{"version":450,"is_range":426,"range_type":94,"version_start":431,"version_start_type":432,"version_end":440,"version_end_type":428,"fixed_in":9},">= unspecified, \u003C 68.9.0"]