2 matches found
CVE-2026-82661 Nodemailer CRLF Injection via List-* Header Comments
Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...
5.4CVSS0.0019EPSS
SaveExploits0References2
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:0800-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0800-1 advisory. - Upgrade go to version 1.21.8 - CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookie...
7.5CVSS6.7AI score0.01165EPSS
SaveExploits0References18
20