{"action":"Upgrade mailgen to 2.0.32 or later.","affected":[{"fixed":"2.0.32","introduced":"0"}],"component":"mailgen","cve_ids":["CVE-2025-62380"],"ecosystem":"npm","epss":0.00452,"exploited":false,"fixed_versions":["2.0.32"],"ghsa_id":"GHSA-q4w9-x3rv-4c8j","id":"tcs_01M5KG561J7YEHR9ZX848A6M7R","modified_at":"2025-10-16T07:57:36.093474Z","published_at":"2025-10-15T19:29:36Z","references":["https://osv.dev/vulnerability/GHSA-q4w9-x3rv-4c8j","https://github.com/eladnava/mailgen/security/advisories/GHSA-q4w9-x3rv-4c8j","https://nvd.nist.gov/vuln/detail/CVE-2025-62380","https://github.com/eladnava/mailgen/commit/7a791a424ff3a3f7783f8750919f1e98639924a8","https://github.com/eladnava/mailgen"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-q4w9-x3rv-4c8j","url":"https://osv.dev/vulnerability/GHSA-q4w9-x3rv-4c8j"},{"source":"nvd","source_id":"CVE-2025-62380","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62380"}],"summary":"Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails"}