CVE-2026-92595

A flaw was found in Nodemailer. Plugin or application code that resolves untrusted message content through the MailMessage.resolveContent API using its legacy three-argument signature can bypass intended sandbox restrictions. This vulnerability allows an attacker to read arbitrary local files or...

CLSA-2026-1790109128 TuxCare security update for nodemailer (2 CVEs)

TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 6.10.1-tuxcare.10...

CVE-2026-92597

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to bypass email domain validation due to incorrect parsing of RFC 5322 comments in email addresses. Specifically, a malformed comment can cause Nodemailer to misinterpret the recipient's domain, leading to the delivery of...

ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root

Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R7G4-QG5F-QQM2 GHSA-r7g4-qg5f-qqm2 in nodemailer - Patched by Root

Root has patched GHSA-r7g4-qg5f-qqm2 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root

Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-H3HJ-CMCX-XC66 GHSA-h3hj-cmcx-xc66 in nodemailer - Patched by Root

Root has patched GHSA-h3hj-cmcx-xc66 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10942 AIKIDO-2026-10942 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10942 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-P6GQ-J5CR-W38F GHSA-p6gq-j5cr-w38f in nodemailer - Patched by Root

Root has patched GHSA-p6gq-j5cr-w38f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JJ37-3377-M6VV GHSA-jj37-3377-m6vv in nodemailer - Patched by Root

Root has patched GHSA-jj37-3377-m6vv in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-645479 AIKIDO-2026-645479 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-645479 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-14874 CVE-2025-14874 in nodemailer - Patched by Root

Root has patched CVE-2025-14874 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-VVJJ-XCJG-GR5G GHSA-vvjj-xcjg-gr5g in nodemailer - Patched by Root

Root has patched GHSA-vvjj-xcjg-gr5g in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10941 AIKIDO-2026-10941 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10941 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-82659 CVE-2026-82659 in nodemailer - Patched by Root

Root has patched CVE-2026-82659 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-2X7J-588G-CCC2 GHSA-2x7j-588g-ccc2 in nodemailer - Patched by Root

Root has patched GHSA-2x7j-588g-ccc2 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-50889 AIKIDO-2026-50889 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-50889 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-46J5-6FG5-4GV3 GHSA-46j5-6fg5-4gv3 in nodemailer - Patched by Root

Root has patched GHSA-46j5-6fg5-4gv3 in the nodemailer package for Root:npm. Multiple fixed versions available...

The vulnerability of the addressparser component in the Nodemailer library, which allows a hacker to trigger a service failure.

The vulnerability of the addressparser component in the Nodemailer email sending library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...