CVE-2026-121424

The Nodemailer library (versions 3.0.0 before 10.1.4) contains an address parsing vulnerability in the addressparser component. The root cause is that the parser incorrectly handles nested RFC 5322 comments by ending them at the first closing parenthesis. This allows remote attackers to craft add...