nodemailer vulnerabilities (TuxCare)
28 vulnerabilities.
-
nodemailerTuxCare Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparser 8.3 High -
nodemailerTuxCare Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser 8.3 High -
nodemailerTuxCare Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing 8.3 High -
nodemailerTuxCare Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments 8.3 High -
nodemailerTuxCare Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing 8.2 High -
nodemailerTuxCare Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service 7.1 High -
nodemailerTuxCare Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments 6.9 Medium -
nodemailerTuxCare Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes 8.7 High -
nodemailerTuxCare Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays 8.2 High -
nodemailerTuxCare Nodemailer 5.0.0 through 10.0.1 TLS servername Cache Confusion 6.0 Medium -
nodemailerTuxCare nodemailer before 10.0.6 Denial of Service via addressparser 8.7 High -
nodemailerTuxCare Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 Comment 6.9 Medium -
nodemailerTuxCare Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass 8.3 High -
nodemailerTuxCare Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Comment 8.3 High -
nodemailerTuxCare Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing 8.7 High -
nodemailerTuxCare Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContent 6.0 Medium -
nodemailerTuxCare Nodemailer CRLF Injection via List-* Header Comments 5.3 Medium -
nodemailerTuxCare nodemailer before 9.0.1 File Read and SSRF via raw option 7.1 High -
nodemailerTuxCare Nodemailer before 9.1.0 Denial of Service via addressparser 8.7 High -
nodemailerTuxCare Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess 5.3 Medium -
nodemailerTuxCare Nodemailer before 8.0.8 TLS Certificate Validation Bypass 8.3 High -
nodemailerTuxCare Nodemailer before 8.0.5 SMTP Command Injection via CRLF 6.9 Medium -
nodemailerTuxCare Nodemailer before 8.0.4 SMTP Command Injection via envelope.size 9.3 Critical -
nodemailerTuxCare Nodemailer: nodemailer: denial of service via crafted email address header 7.5 High -
nodemailerTuxCare Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict 7.5 High -
nodemailerTuxCare nodemailer before 6.9.9 ReDoS via attachDataUrls parameter 6.9 Medium -
nodemailerTuxCare HTTP Header Injection 6.3 Medium -
nodemailerTuxCare Command Injection 8.6 High