GHSA-8M3C-C648-2XJJ Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

Summary Nodemailer's disableFileAccess / disableUrlAccess options are a security sandbox that lets an application forbid untrusted message content html/text/attachment path/href from reading local files or making outbound HTTPS requests. The fix for GHSA-wqvq-jvpq-h66f commit 5f69497 threaded the...

CVE-2024-36051

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2024-38365. Reason: This record is a duplicate of CVE-2024-38365. Notes: All CVE users should reference CVE-2024-38365 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2024-36051

CVE-2024-36051 is a duplicate of CVE-2024-38365. The underlying issue affects btcd (Go-based Bitcoin client) versions 0.10–0.24, where FindAndDelete() loses some data vs Bitcoin Core’s behavior in removeOpcodeByData(), creating a consensus discrepancy that could allow a chain split or DoS. The vu...