CVE-2026-82659

nodemailer before 9.0.1 contains a sandbox-bypass vulnerability in its message-level raw option. The disableFileAccess and disableUrlAccess flags are not applied when the raw option is used, allowing authenticated attackers to read arbitrary files or perform server-side request forgery (SSRF) by ...

CVE-2026-82659 nodemailer before 9.0.1 File Read and SSRF via raw option

nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...

CVE-2010-1172

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the 1 DeviceKit-Power, 2 NetworkManager, and 3 ModemManager...