## mfsa2021-37.yml
announced: August 16, 2021
impact: high
fixed_in:
- Firefox 91.0.1
title: Security Vulnerabilities fixed in Firefox 91.0.1
advisories:
  CVE-2021-29991:
    title: Header Splitting possible with HTTP/3 Responses
    impact: high
    reporter: Neal Poole
    description: |
      Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3.
    bugs:
      - url: 1724896

Add 91.0.1 dot release advisory
Add 91.0.1 dot release advisory
