DuckDuckGo browser extension flaw

The DuckDuckGo Privacy Essentials browser extension, designed to protect user privacy by blocking trackers and offering private browsing features, was embedded with two vulnerabilities.

The bugs present in their Chrome, Firefox, and Edge versions of the extension included a data leakage flaw as well as a  cross-site scripting (XSS) vulnerability. The extensions have now been patched for Chrome and Firefox, but not for Edge.

So if you use DuckDuckGo with their privacy extension for web searches, make sure you have their latest version of the extension installed in your browser(s).