Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:mozilla/Thunderbird@78.9.1
purl pkg:mozilla/Thunderbird@78.9.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3tmg-yvx8-5kdt If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. CVE-2021-23991

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:17:11.300443+00:00 Mozilla Importer Fixing VCID-3tmg-yvx8-5kdt https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2021/mfsa2021-13.yml 38.0.0