Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For Debian 11 bullseye, these problems have been fixed in version 1:140.8.0esr-1~deb11u1. We recommend that you upgrade your thunderbird packages.

Source: Debian 11 Thunderbird Critical Code Execution Info Disclosure DLA-4495-1