nodemailer vulnerabilities and fixes
Exploited and high-severity nodemailer vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.3CVE-2026-121426Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparserFix availablenodemailer nodemailer
1 min read - 8.3CVE-2026-121424Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested CommentsFix availablenodemailer nodemailer
1 min read - 8.3CVE-2026-121425Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group ParsingFix availablenodemailer nodemailer
1 min read