Please do not publish security-sensitive details in a public issue.

Open a private security advisory on GitHub when available, or contact the maintainer through the public repository with a minimal request for private follow-up.

Include:

• Thunderbird version.
• Operating system.
• Extension version.
• A clear description of the security concern.
• Reproduction steps when safe to share.