NO
Product
nodemailer
by nodemailer · last CVE Oct 14, 2026
24
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 8Medium 14Low 0
Watch

Add nodemailer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82854
9.8
2%
Aug 31
Nodemailer before 8.0.3 SMTP Command Injection via envelope.size
Affected: before 8.0.3
CVE-2020-7769
9.8
2%
Nov 12
This affects the package nodemailer before 6.4.16
Affected: before 6.4.16
Showing 2