{"action":"Upgrade thunderbird to 91.3.2-r0 or later.","affected":[{"fixed":"91.3.2-r0","introduced":"0"}],"component":"thunderbird","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["91.3.2-r0"],"id":"tcs_01M6GVABZC8R2X7FWRP6V4J7DW","modified_at":"2026-11-03T06:32:39.175299396Z","published_at":"2021-06-24T14:15:10.110Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2021-29957","https://security.alpinelinux.org/vuln/CVE-2021-29957"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2021-29957#Alpine:v3.18/thunderbird","url":"https://osv.dev/vulnerability/ALPINE-CVE-2021-29957"}],"summary":"If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are p"}