CVE-2022-28289 affects multiple packages. Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91. See references for individual vulnerability details.