pkg:npm/nodemailer

All known vulnerabilities

• CRITICAL9.8CVE-2020-7769Command injection in nodemailer
  from 0, < 6.4.16
• HIGH7.5CVE-2025-14874Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
  >= 3.0.0, < 7.0.11
• HIGH7.5CVE-2025-13033Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
  from 0, < 7.0.7
• MEDIUM6.3Header injection in nodemailer
  from 0, < 6.6.1