ALAS2-2022-1804

The Mozilla Foundation Security Advisory describes this flaw as:
An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. (CVE-2022-1529)

he Mozilla Foundation Security Advisory describes this flaw as:
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. (CVE-2022-1802)

aarch64:
    thunderbird-91.9.1-1.amzn2.0.1.aarch64
    thunderbird-debuginfo-91.9.1-1.amzn2.0.1.aarch64

src:
    thunderbird-91.9.1-1.amzn2.0.1.src

x86_64:
    thunderbird-91.9.1-1.amzn2.0.1.x86_64
    thunderbird-debuginfo-91.9.1-1.amzn2.0.1.x86_64