Search CVE reports
11 – 12 of 12 results
The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object.
1 affected package
node-nodemailer
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| node-nodemailer | Not affected | Not affected | Needs evaluation | Needs evaluation | Not in release |
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
1 affected package
node-nodemailer
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| node-nodemailer | Not affected | Not affected | Not affected | Vulnerable | Not in release |