ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in @rootio/nodemailer - Patched by Root

Root has patched CVE-2025-13033 in the @rootio/nodemailer package for Root:npm. Multiple fixed versions available...

CVE-2025-13033

creationtimestamp| type| source ---|---|--- 2025-11-14 20:51:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115550027473285812...

CVE-2025-13033

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the emai...

0.extends.fc (=1.0.65), 0.extends.react (=1.0.51) +12077 more potentially affected by CVE-2025-13033 via nodemailer (>=0.1.18 <=7.0.6)

nodemailer NPM version =0.1.18, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 10er10 =0.23.0 and more Source cves: CVE-2025-13033 Source advisory: OSV:GHSA-MM7P-FCC7-PG87...