{"id":"AIKIDO-2026-612508","aliases":["ROOT-APP-NPM-AIKIDO-2026-612508"],"status":"published","title":"AIKIDO-2026-612508 in nodemailer - Patched by Root","description":"Root has patched AIKIDO-2026-612508 in the nodemailer package for Root:npm. Multiple fixed versions available.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-19T13:20:22Z","modified":"2026-10-19T14:15:12Z","fixes":[{"ecosystem":"Root:npm","package":"nodemailer","fixed_in":["7.0.11-aikido.7","9.1.1-aikido.3","9.0.3-aikido.3","7.0.13-aikido.4","9.0.1-aikido.3","9.0.5-aikido.3","6.10.1-aikido.12","9.1.1-aikido.4","9.1.1-aikido.5","9.0.5-aikido.4","7.0.13-aikido.5","9.0.1-aikido.4","6.10.1-aikido.13","9.0.3-aikido.4","7.0.11-aikido.8","7.0.11-aikido.9","7.0.13-aikido.6","7.0.13-aikido.7","9.1.1-aikido.6","6.10.1-aikido.14"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/nodemailer","fixed_in":["7.0.11-root.io.7","9.1.1-root.io.3","9.0.3-root.io.3","7.0.13-root.io.4","9.0.1-root.io.3","9.0.5-root.io.3","6.10.1-root.io.12","9.1.1-root.io.4","9.1.1-root.io.5","9.0.5-root.io.4","7.0.13-root.io.5","9.0.1-root.io.4","6.10.1-root.io.13","9.0.3-root.io.4","7.0.11-root.io.8","7.0.11-root.io.9","7.0.13-root.io.6","7.0.13-root.io.7","9.1.1-root.io.6","6.10.1-root.io.14"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Root:npm","package":"nodemailer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.11-aikido.7"},{"fixed":"9.1.1-aikido.3"},{"fixed":"9.0.3-aikido.3"},{"fixed":"7.0.13-aikido.4"},{"fixed":"9.0.1-aikido.3"},{"fixed":"9.0.5-aikido.3"},{"fixed":"6.10.1-aikido.12"},{"fixed":"9.1.1-aikido.4"},{"fixed":"9.1.1-aikido.5"},{"fixed":"9.0.5-aikido.4"},{"fixed":"7.0.13-aikido.5"},{"fixed":"9.0.1-aikido.4"},{"fixed":"6.10.1-aikido.13"},{"fixed":"9.0.3-aikido.4"},{"fixed":"7.0.11-aikido.8"},{"fixed":"7.0.11-aikido.9"},{"fixed":"7.0.13-aikido.6"},{"fixed":"7.0.13-aikido.7"},{"fixed":"9.1.1-aikido.6"},{"fixed":"6.10.1-aikido.14"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/nodemailer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.11-root.io.7"},{"fixed":"9.1.1-root.io.3"},{"fixed":"9.0.3-root.io.3"},{"fixed":"7.0.13-root.io.4"},{"fixed":"9.0.1-root.io.3"},{"fixed":"9.0.5-root.io.3"},{"fixed":"6.10.1-root.io.12"},{"fixed":"9.1.1-root.io.4"},{"fixed":"9.1.1-root.io.5"},{"fixed":"9.0.5-root.io.4"},{"fixed":"7.0.13-root.io.5"},{"fixed":"9.0.1-root.io.4"},{"fixed":"6.10.1-root.io.13"},{"fixed":"9.0.3-root.io.4"},{"fixed":"7.0.11-root.io.8"},{"fixed":"7.0.11-root.io.9"},{"fixed":"7.0.13-root.io.6"},{"fixed":"7.0.13-root.io.7"},{"fixed":"9.1.1-root.io.6"},{"fixed":"6.10.1-root.io.14"}]}]}],"sources":{"osv":[{"id":"ROOT-APP-NPM-AIKIDO-2026-612508","title":"AIKIDO-2026-612508 in nodemailer - Patched by Root","description":"Root has patched AIKIDO-2026-612508 in the nodemailer package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-10-19T13:20:22Z","modified":"2026-10-19T14:15:12.052172851Z","updated_at":"2026-11-02T15:53:27.362922Z"}]}}