Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:mozilla/Thunderbird@140.7.1
Typemozilla
Namespace
NameThunderbird
Version140.7.1
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version140.7.2
Latest_non_vulnerable_version151.0.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-tvnw-j8vm-97he
vulnerability_id VCID-tvnw-j8vm-97he
summary 
When a user explicitly requested Thunderbird to decrypt an inline
OpenPGP message that was embedded in a text section of an email
that was formatted and styled with HTML and CSS, then the
decrypted contents were rendered in a context in which the CSS
styles from the outer messages were active. If the user had
additionally allowed loading of the remote content referenced by
the outer email message, and the email was crafted by the sender
using a combination of CSS rules and fonts and animations, then
it was possible to extract the secret contents of the email.
references
0
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2026-07
reference_id mfsa2026-07
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2026-07
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2026-08
reference_id mfsa2026-08
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2026-08
fixed_packages
0
url pkg:mozilla/Thunderbird@140.7.1
purl pkg:mozilla/Thunderbird@140.7.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@140.7.1
1
url pkg:mozilla/Thunderbird@147.0.1
purl pkg:mozilla/Thunderbird@147.0.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@147.0.1
aliases CVE-2026-0818
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tvnw-j8vm-97he
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@140.7.1