| Package | Affected versions | Patched versions |
|---|---|---|
| thunderbird | ≥ 141.0, < 153.2.0≥ 154.0, < 155.0< 140.15.0 | 153.2.0155.0140.15.0 |
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free