node-nodemailer vulnerabilities (Debian)
27 vulnerabilities.
-
node-nodemailerDebian Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser 8.3 High -
node-nodemailerDebian Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing 8.3 High -
node-nodemailerDebian Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments 8.3 High -
node-nodemailerDebian Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing 8.2 High -
node-nodemailerDebian Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service 7.1 High -
node-nodemailerDebian Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments 6.9 Medium -
node-nodemailerDebian Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes 8.7 High -
node-nodemailerDebian Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays 8.2 High -
node-nodemailerDebian Nodemailer 5.0.0 through 10.0.1 TLS servername Cache Confusion 6.0 Medium -
node-nodemailerDebian nodemailer before 10.0.6 Denial of Service via addressparser 8.7 High -
node-nodemailerDebian Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 Comment 6.9 Medium -
node-nodemailerDebian Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass 8.3 High -
node-nodemailerDebian Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Comment 8.3 High -
node-nodemailerDebian Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing 8.7 High -
node-nodemailerDebian Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContent 6.0 Medium -
node-nodemailerDebian Nodemailer CRLF Injection via List-* Header Comments 5.3 Medium -
node-nodemailerDebian nodemailer before 9.0.1 File Read and SSRF via raw option 7.1 High -
node-nodemailerDebian Nodemailer before 9.1.0 Denial of Service via addressparser 8.7 High -
node-nodemailerDebian Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess 5.3 Medium -
node-nodemailerDebian Nodemailer before 8.0.8 TLS Certificate Validation Bypass 8.3 High -
node-nodemailerDebian Nodemailer before 8.0.5 SMTP Command Injection via CRLF 6.9 Medium -
node-nodemailerDebian Nodemailer before 8.0.4 SMTP Command Injection via envelope.size 9.3 Critical -
node-nodemailerDebian Nodemailer: nodemailer: denial of service via crafted email address header 7.5 High -
node-nodemailerDebian Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict 7.5 High -
node-nodemailerDebian nodemailer before 6.9.9 ReDoS via attachDataUrls parameter 6.9 Medium -
node-nodemailerDebian HTTP Header Injection 6.3 Medium -
node-nodemailerDebian Command Injection 8.6 High