Vulnerabilidades en nodemailer
25 resultadosCVE-2026-82854CRITICALNodemailer before 8.0.4 SMTP Command Injection via envelope.sizeEPSS 2.0%CVE-2026-82853MEDIUMNodemailer before 8.0.5 SMTP Command Injection via CRLFEPSS 1.0%CVE-2026-92596HIGHNodemailer before 9.1.0 Denial of Service via addressparserEPSS 0.8%CVE-2026-90776HIGHNodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address ParsingEPSS 0.7%CVE-2025-14874HIGHNodemailer: nodemailer: denial of service via crafted email address headerEPSS 0.6%CVE-2025-13033HIGHNodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflictEPSS 0.6%CVE-2024-58379MEDIUMnodemailer before 6.9.9 ReDoS via attachDataUrls parameterEPSS 0.4%CVE-2026-92598HIGHNodemailer before 9.1.0 IDN/Punycode Domain Allow-list BypassEPSS 0.4%CVE-2026-92597HIGHNodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 CommentEPSS 0.4%CVE-2026-110871HIGHNodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of ServiceEPSS 0.4%CVE-2026-110869HIGHNodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.4%CVE-2026-110872HIGHNodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply ParsingEPSS 0.4%CVE-2026-82659HIGHnodemailer before 9.0.1 File Read and SSRF via raw optionEPSS 0.3%CVE-2026-121424HIGHNodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested CommentsEPSS 0.3%CVE-2026-100700HIGHnodemailer before 10.0.6 Denial of Service via addressparserEPSS 0.3%CVE-2026-121425HIGHNodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group ParsingEPSS 0.3%CVE-2026-92595MEDIUMNodemailer before 9.1.1 Security Sandbox Bypass via resolveContentEPSS 0.3%CVE-2026-110870MEDIUMNodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address CommentsEPSS 0.3%CVE-2026-82661MEDIUMNodemailer CRLF Injection via List-* Header CommentsEPSS 0.3%CVE-2026-82660MEDIUMNodemailer jsonTransport bypasses disableFileAccess and disableUrlAccessEPSS 0.3%