0.extends.fc (=1.0.65), 0.extends.react (=1.0.51) +11032 more potentially affected by CVE-2021-23400 via nodemailer (>=0.1.18 <=6.6.0)

nodemailer NPM version =0.1.18, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 10er10 =0.23.0 - 123ac =1.0.8 and more Source cves: CVE-2021-23400 Source advisory: OSV:GHSA-HWQF-GCQM-7353...

CVE-2021-23400

The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object...

CVE-2021-23400

The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object...

CVE-2021-23400 HTTP Header Injection

The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object...

CVE-2021-23400

The CVE-2021-23400 issue affects the Nodemailer package before version 6.6.1. The vulnerability arises from HTTP header injection when unsanitized user input containing newlines/CRs is passed into an address object, enabling injection in HTTP headers. Affected software: Nodemailer (node module); ...

0.extends.fc (=1.0.65), 0.extends.react (=1.0.51) +7852 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0 <=6.6.0)

nodemailer NPM version =6.0.0, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac =1.0.8 - 123acyashu =1.0.8 and more Source cves: CVE-2021-23400 Source advisory: SNYK:JS-NODEMAILER-1296415...