npm/nodemailer CVE-2021-23400: medium 6.3, EPSS 1.39%
Header injection in nodemailer
Action: Upgrade nodemailer to 6.6.1 or later.
npm i nodemailer@6.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.6.1 | - |
Fixed versions
| 6.6.1 |
Sources
- osv: GHSA-hwqf-gcqm-7353
- https://nvd.nist.gov/vuln/detail/CVE-2021-23400
- https://github.com/nodemailer/nodemailer/issues/1289
- https://github.com/nodemailer/nodemailer/commit/7e02648cc8cd863f5085bad3cd09087bccf84b9f
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1314737
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-1296415
CVE-2021-23400 · published · modified · JSON