The vulnerability of the MailComposer.compile() method in the Nodemailer email sending library allows a hacker to expose protected information and perform an SSRF attack.

The vulnerability of the MailComposer.compile method in the Nodemailer email sending library is related to improper external manipulation of file names or file paths. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and perform an SSRF attack...