Skip to content
Sign in
8.6 High

CVE-2020-7769 This affects the package nodemailer before 6.4.16

Description

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.

Affected products and versions

Product Affected versions Fixed in
nodemailer 6.4 earliest → < 6.4.16 6.4.16

Other CVEs of nodemailer

The 2 CVEs of nodemailer →
CVE-2021-23400 The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain… 6.3 Medium
Track this CVE