Thunderbird 68.1 was released this week which includes multiple fixes for vulnerabilities discovered. You can find the blog post with the details here: https://www.lansweeper.com/vulnerability/multiple-mozilla-thunderbird-vulnerabilities-fixed-in-68-1/
The report can be found here: https://www.lansweeper.com/report/thunderbird-68-vulnerability-audit/
