NSS 3.131.1 ships important fixes tracked as CVE-2026-113470
Original title: NSS 3.131.1 Release - Important Security Updates
The oss-security note cites Mozilla advisory MFSA2026-112 but does not describe the flaw or exploitation.
Alan Coopersmith posted Mozilla's NSS 3.131.1 release announcement, described as important security updates, to oss-security on October 20. The note points to Mozilla advisory MFSA2026-112 and says it suggests the update is tracked as CVE-2026-113470 for Mozilla products. The excerpt gives no vulnerability details, affected version range, or exploitation status.
Unconfirmed: The post only says the Mozilla advisory suggests CVE-2026-113470 tracks the update; the flaw itself is not described.
- The cited Mozilla advisory identifier is MFSA2026-112.
- The post says the CVE tracking applies to Mozilla products.
- No impact, attack vector, or patch scope is described in the excerpt.
| Product | Affected | Fixed in |
|---|---|---|
| Mozilla NSS | — | 3.131.1 |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-113470 | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component | 5.4 | — |
From the original article
Posted by Alan Coopersmith on Oct 20 https://groups. google. com/a/mozilla.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.