{"action":"Upgrade mailgen to 2.0.30 or later.","affected":[{"fixed":"2.0.30","introduced":"0"}],"component":"mailgen","cve_ids":["CVE-2025-59526"],"ecosystem":"npm","epss":0.00438,"exploited":false,"fixed_versions":["2.0.30"],"ghsa_id":"GHSA-j2xj-h7w5-r7vp","id":"tcs_01M5KFWKM5CFWDAG87TKNMVZ2T","modified_at":"2025-09-23T20:50:37Z","published_at":"2025-09-22T18:03:47Z","references":["https://osv.dev/vulnerability/GHSA-j2xj-h7w5-r7vp","https://github.com/eladnava/mailgen/security/advisories/GHSA-j2xj-h7w5-r7vp","https://nvd.nist.gov/vuln/detail/CVE-2025-59526","https://github.com/eladnava/mailgen/commit/741a0190ddae0f408b22ae3b5f0f4c3f5cf4f11d","https://github.com/eladnava/mailgen"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j2xj-h7w5-r7vp","url":"https://osv.dev/vulnerability/GHSA-j2xj-h7w5-r7vp"}],"summary":"Mailgen: HTML injection vulnerability in plaintext e-mails"}