MINI-5GV5-X2G8-XJ69

Bulletin has no description...

MINI-4532-GQFP-RW43

Bulletin has no description...

MINI-V75M-9FHQ-J296

Bulletin has no description...

MINI-9HWH-HHRF-GC7V

Bulletin has no description...

MINI-HPJV-CC63-GHV5

Bulletin has no description...

MINI-FWG9-W855-C9HJ

Bulletin has no description...

MINI-86V4-F23R-QQM3

Bulletin has no description...

MINI-HG68-QQFR-M9J7

Bulletin has no description...

MINI-FG7C-WCCM-X3P5

Bulletin has no description...

MINI-CHWR-M872-26J4

Bulletin has no description...

MINI-48XF-8FHR-GP59

Bulletin has no description...

MINI-M62R-XM5P-M85C

Bulletin has no description...

DEBIAN-CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

CGA-FX3J-3554-2PH4

Bulletin has no description...

CGA-3WGQ-JCP9-Q8MM

Bulletin has no description...

CGA-MX67-F7JR-JC7J

Bulletin has no description...

DEBIAN-CVE-2026-82853

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

DEBIAN-CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

DEBIAN-CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

DEBIAN-CVE-2026-82659

nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...