CVE-2026-3455
1 advisory.
npm/mailparser CVE-2026-3455: medium 6.1, EPSS 0.44%
mailparser vulnerable to Cross-site Scripting
Action: Upgrade mailparser to 3.9.3 or later.
npm i mailparser@3.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.9.3 | - |
Fixed versions
| 3.9.3 |
Sources
- osv: GHSA-7gmj-h9xc-mcxc
- https://nvd.nist.gov/vuln/detail/CVE-2026-3455
- https://github.com/nodemailer/mailparser/issues/412
- https://github.com/nodemailer/mailparser/commit/921a67df4cfb38f0b411037d7b26fbd4d5411b08
- https://gist.github.com/hayageek/7fcb225e3b1ea9a341d560403fbb585a
- https://github.com/nodemailer/mailparser
- https://security.snyk.io/vuln/SNYK-JS-MAILPARSER-15204032
CVE-2026-3455 · published · modified · JSON