https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:18:53.729033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-66596 cnvd-2020-66596 2026-10-10T21:18:53.735073+00:00 cnvd-2020-66596 https://cve.radiocsirt.org/vuln/euvd-2026-168756 EUVD-2026-168756 2026-10-10T21:18:53.735110+00:00 EUVD-2026-168756 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7769 fkie_cve-2020-7769 2026-10-10T21:18:53.735124+00:00

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.

 https://cve.radiocsirt.org/vuln/ghsa-48ww-j4fc-435p GHSA-48ww-j4fc-435p — Command injection in nodemailer 2026-10-10T21:18:53.735153+00:00

Affected: npm: nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.

 https://cve.radiocsirt.org/vuln/gsd-2020-7769 gsd-2020-7769 2026-10-10T21:18:53.735175+00:00 gsd-2020-7769 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7769 UBUNTU-CVE-2020-7769 2026-10-10T21:18:53.735187+00:00

Affected: Ubuntu:20.04:LTS: node-nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.