Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

nodemailer

npm

Easy as cake e-mail sending from your Node.js applications

View on github.com · View on npmjs.org

Security Advisories for nodemailer in npm

High
12 days ago

Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser) GSA_kwCzR0hTQS1wcmdoLXhwOHItcDNtNc4AB7Kk

npm nodemailer
Moderate
13 days ago

Nodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing GSA_kwCzR0hTQS1nNTdnLWYyM2ctNDY0Ns4AB7FI

npm nodemailer
High
13 days ago

Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service GSA_kwCzR0hTQS12NTNwLTlmcXAtbTc5as4AB7FH

npm nodemailer
Moderate
13 days ago

Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS GSA_kwCzR0hTQS04dnZ4LXJmZjUtcDVycc4AB7AA

npm nodemailer
Moderate
14 days ago

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure GSA_kwCzR0hTQS02dmo5LW13cTYtMmY1ds4AB67A

npm nodemailer
Moderate
about 1 month ago

Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain GSA_kwCzR0hTQS13bW1wLTM1ODUtM3JtcM4ABu9Y

npm nodemailer
High
about 1 month ago

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list GSA_kwCzR0hTQS0yeDdqLTU4OGctY2NjMs4ABu9X

npm nodemailer
Moderate
about 1 month ago

Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain GSA_kwCzR0hTQS1jYzlyLTJqNW0tMm04M84ABu9W

npm nodemailer
Moderate
about 1 month ago

Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature GSA_kwCzR0hTQS04bTNjLWM2NDgtMnhqas4ABu87

npm nodemailer
High
4 months ago

Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message GSA_kwCzR0hTQS1wNmdxLWo1Y3ItdzM4Zs4ABZFy

npm nodemailer
Moderate
4 months ago

Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection GSA_kwCzR0hTQS0yNjhoLWhwNGMtY3JxM84ABYrj

npm nodemailer
Moderate
4 months ago

Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization GSA_kwCzR0hTQS13cXZxLWp2cHEtaDY2Zs4ABYri

npm nodemailer
High
4 months ago

Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception GSA_kwCzR0hTQS1yN2c0LXFnNWYtcXFtMs4ABYrh

npm nodemailer
Moderate
6 months ago

Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO) GSA_kwCzR0hTQS12dmpqLXhjamctZ3I1Z84ABU79

npm nodemailer
Low
7 months ago

Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter GSA_kwCzR0hTQS1jN3czLXg5M2YtcW1tOM4ABUWj

npm nodemailer
High
11 months ago

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls GSA_kwCzR0hTQS1yY21oLXFqcWgtcDk4ds4ABPEh

maven, npm org.webjars.npm:nodemailer, nodemailer
Moderate
about 1 year ago

Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict GSA_kwCzR0hTQS1tbTdwLWZjYzctcGc4N84ABNC0

npm nodemailer
Moderate
over 2 years ago

nodemailer ReDoS when trying to send a specially crafted email GSA_kwCzR0hTQS05aDZnLXByMjgtN2NxcM4AA4-p

npm nodemailer
Moderate
almost 5 years ago

Header injection in nodemailer MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh3cWYtZ2NxbS03MzUz

npm nodemailer
Critical
over 5 years ago

Command injection in nodemailer MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ4d3ctajRmYy00MzVw

npm nodemailer

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 12 High 6 Low 1 Critical 1