Homepage

CVE-2022-26388 Affecting thunderbird package, versions <91.7.0-r0

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ALPINE318-THUNDERBIRD-5517591
  • published24 May 2022
  • disclosed7 Feb 2025
Report a new vulnerability Found a mistake?

Introduced: 24 May 2022

CVE-2022-26388  (opens in a new tab)

How to fix?

Upgrade Alpine:3.18 thunderbird to version 91.7.0-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream thunderbird package and not the thunderbird package as distributed by Alpine. See How to fix? for Alpine:3.18 relevant fixed versions and status.

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph:

Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:

Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph:

Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph:

Versions 2.2.0 and prior.