1 matches found
Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature
Summary Nodemailer's disableFileAccess / disableUrlAccess options are a security sandbox that lets an application forbid untrusted message content html/text/attachment path/href from reading local files or making outbound HTTPS requests. The fix for GHSA-wqvq-jvpq-h66f commit 5f69497 threaded the...
5.8AI score
SaveExploits0References5Affected Software1
20