CVE-2026-121424

A flaw was found in nodemailer. A remote attacker can cause email redirection and information disclosure by supplying a specially crafted email address containing nested comments. The internal address parser prematurely ends comment processing at the first closing parenthesis, treating the...