npm/mailgen CVE-2025-62366: low 2.9, EPSS 0.43%
Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails
Action: Upgrade mailgen to 2.0.31 or later.
npm i mailgen@2.0.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.31 | - |
Fixed versions
| 2.0.31 |
Sources
- osv: GHSA-xw6r-chmh-vpmj
- nvd: CVE-2025-62366
- https://github.com/eladnava/mailgen/security/advisories/GHSA-xw6r-chmh-vpmj
- https://github.com/eladnava/mailgen/commit/7279a983481d05c51aa451e86146f98aaa42fee9
- https://github.com/eladnava/mailgen
CVE-2025-62366 · published · modified · JSON