CVE-2025-3877

Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986...

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird 136 and Thunderbird 128.8...

CVE-2025-26695

The Mozilla Thunderbird email client is vulnerable to an information disclosure flaw when requesting an OpenPGP key from a WKD server . Due to the use of incorrect padding sizes , a network observer could potentially determine the length of the requested email address . This vulnerability affects...