ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root

Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...

CVE-2025-13033

creationtimestamp| type| source ---|---|--- 2025-11-14 20:51:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115550027473285812...

CVE-2025-13033

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the emai...