https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-23655.htmlhttps://patchthecve.com/cve/CVE-2024-23655.htmlWed, 17 Jun 2026 07:13:19 +0000HIGH 7.5: Tuta is an encrypted email service. Starting in version 3.118.12 and prior to version 3.119.10, an attacker is able to send a manipulated email so that the user can no longer use the app to get access to received emails. By sending a manipulated email, an attacker could put the app into an unusable https://patchthecve.com/cve/CVE-2024-23330.htmlhttps://patchthecve.com/cve/CVE-2024-23330.htmlWed, 17 Jun 2026 07:12:36 +0000MEDIUM 5.3: Tuta is an encrypted email service. In versions prior to 119.10, an attacker can attach an image in a html mail which is loaded from external resource in the default setting, which should prevent loading of external resources. When displaying emails containing external content, they should be loadedhttps://patchthecve.com/cve/CVE-2023-46116.htmlhttps://patchthecve.com/cve/CVE-2023-46116.htmlWed, 17 Jun 2026 06:30:10 +0000CRITICAL 9.3: Tutanota (Tuta Mail) is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the `file:` URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to che