| Package | Affected versions | Patched versions |
|---|---|---|
| thunderbird | ≥ 128.0.1, < 128.7.0≥ 131.0, < 135.0 | 128.7.0135.0 |
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free