Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/08 9:16 p.m.7 views

Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

Summary Nodemailer's disableFileAccess / disableUrlAccess options are a security sandbox that lets an application forbid untrusted message content html/text/attachment path/href from reading local files or making outbound HTTPS requests. The fix for GHSA-wqvq-jvpq-h66f commit 5f69497 threaded the...

5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder