{"action":"Upgrade thunderbird to 1:68.2.1-1 or later.","affected":[{"fixed":"1:68.2.1-1","introduced":"0"}],"component":"thunderbird","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:68.2.1-1"],"id":"tcs_01M5NDQBNPYWW1XYGF35FZGYZ5","modified_at":"2026-09-21T07:00:26.382836381Z","published_at":"2020-01-08T20:15:12.953Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-11763","https://security-tracker.debian.org/tracker/CVE-2019-11763"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-11763#Debian:13/thunderbird","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-11763"}],"summary":"Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could"}