Nodemailer: RFC 5322 Comment Inside An Angle-bracket Address Is Never Stripped

Summary Nodemailer's address parser has three published, patched fixes for RFC 5322 comment " ... " handling inside an addr-spec: GHSA-cc9r-2j5m-2m83 comment glued two domain atoms into one, GHSA-g57g-f23g-4646 the same glue for a quoted local part, and the related ReDoS fixes GHSA-prgh-xp8r-p3m5...