Update to 128.11.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/
Comment
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in libsoup.
Several security issues were fixed in WebKitGTK.