Firefox 138 rendering of scorecard's score shows weird characters

[nitrocode]

Using this page as an example https://securityscorecards.dev/viewer/?uri=github.com/slackapi/slack-github-action

Here is a screenshot in firefox

Here is a screenshot in firefox without font-family key (disabling defaults to inherit)

[bilaldeveloper4312]

I investigated the two attached screenshots and traced the corruption to the score inside the SVG (<text class="value">). It inherits the page's long system-ui font stack; the rest of the report renders correctly, and the second screenshot confirms that removing that inherited stack makes 6.4 render normally.

I have a local, narrowly scoped candidate fix that sets only .value to the generic sans-serif family, preserving the page typography while avoiding the Firefox SVG/system-font interaction. The HTML/CSS structure and formatting diff validate locally, but I do not have Firefox 138 installed, so I will not claim browser verification yet. If this approach matches maintainer expectations, I can submit it with the limitation documented for review.

[bilaldeveloper4312]

Follow-up after exact-version testing: I ran the live viewer on Windows with Playwright Firefox 137 (the release immediately before the reported Firefox 138) and Firefox 153. Both render the current production score correctly (6.9) while using the existing inherited system-ui stack. Applying the proposed .value { font-family: sans-serif; } override only changes the typeface; it does not fix a currently reproducible defect.

This points to a Firefox 138-specific rendering regression that was subsequently fixed in Firefox, rather than a persistent webapp bug. I have therefore withdrawn my local CSS candidate and will not open an unnecessary PR. If someone can still reproduce this on a supported current Firefox version, the browser/OS/font details would help reopen the investigation.