Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/thunderbird@115.4.1-r0?arch=riscv64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/thunderbird@115.4.1-r0?arch=riscv64&distroversion=v3.20&reponame=community
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-bwzh-bspg-v7f8 Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. CVE-2023-5730
VCID-e3a2-mhd3-d3c9 During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. CVE-2023-5728
VCID-gszc-kcve-m7ht An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. CVE-2023-5732
VCID-jpdh-h3zh-2fag The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* CVE-2023-5727
VCID-x5fv-e9ne-d7du It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. CVE-2023-5721

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T10:11:50.247289+00:00 Alpine Linux Importer Fixing VCID-gszc-kcve-m7ht https://secdb.alpinelinux.org/v3.20/community.json 38.6.0
2026-05-29T10:11:21.922582+00:00 Alpine Linux Importer Fixing VCID-e3a2-mhd3-d3c9 https://secdb.alpinelinux.org/v3.20/community.json 38.6.0
2026-05-29T10:10:56.129609+00:00 Alpine Linux Importer Fixing VCID-jpdh-h3zh-2fag https://secdb.alpinelinux.org/v3.20/community.json 38.6.0
2026-05-29T10:03:06.932911+00:00 Alpine Linux Importer Fixing VCID-bwzh-bspg-v7f8 https://secdb.alpinelinux.org/v3.20/community.json 38.6.0
2026-05-29T09:46:26.032151+00:00 Alpine Linux Importer Fixing VCID-x5fv-e9ne-d7du https://secdb.alpinelinux.org/v3.20/community.json 38.6.0