Leo Balter

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 99 **Description** The issue is related to the implementation of the SVG `<use>` element, which could be used to load unexpected content, potentially executing scripts under certain circumstances. Although the specification appears to permit this behavior, other browsers do not, and web developers have relied on this property for script security. As a result, Gecko's implementation was adjusted to align with other browsers. **Recommendations** For Firefox versions prior to 99, update to version 99 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `<use>` element in SVG content until the update is applied.