oech3 [1] filed a deletion request for mercury-browser-bin [2]: https://aur.archlinux.org/cgit/aur.git/commit/?h=mercury-browser- bin&id=8c02aeee7f5c418ffdf78ece1007d414812e69b1 5 month is enough to guide to non CVE app. This does not block installing other mercury-browser-*-bin. Also this CVE has not chance to fix. [1] https://aur.archlinux.org/account/oech3/ [2] https://aur.archlinux.org/pkgbase/mercury-browser-bin/