It is based on Firefox ESR(Extended Support Release) which gets security fixes backported.