"textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click."
@Polynomial-C: could you let us know if there's any connection b/t Claws Mail and Sylpheed?
(In reply to Sam James from comment #1)
> @Polynomial-C: could you let us know if there's any connection b/t Claws
> Mail and Sylpheed?
I wonder how I missed this before when I was looking:
>In 2005, Sylpheed was forked to create Sylpheed-Claws, now known as Claws Mail. As of 2020, both projects continue to be developed independently.
That explains that!