GHSA-5wmq-rgwc-2fgc
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen message on restart, triggering the crash again. This vulnerability affects Thunderbird < 60.5.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: November 26, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.