An open index of dependabot pull requests across open source projects.

nodemailer

Ecosystem:
npm
Package URL:
pkg:npm/nodemailer
Total PRs:
7,745 Dependabot PRs
Latest PR:
about 24 hours ago
Unique Repositories:
4,472 repositories
Unique Repos (30 days):
157 repositories
Security Advisories
Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
GHSA-4ffr-jq9g-5ffx MODERATE published 7 days ago • updated 1 day ago
## Summary Nodemailer's SMTP client applies four regular expressions to a peer's EHLO response to detect the supported SASL mechanisms. Each patte...
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
GHSA-g73g-hqqh-jr95 MODERATE published 7 days ago • updated 1 day ago
## Summary Nodemailer's address parser has three published, patched fixes for RFC 5322 comment `( ... )` handling inside an addr-spec: GHSA-cc9r-2...
Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
GHSA-4g23-2xm8-66gc MODERATE published 7 days ago • updated 1 day ago
## Summary The SMTP client response parser reassembles multiline server replies by appending each continuation line onto a single response-queue e...
Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS
GHSA-8vvx-rff5-p5rq MODERATE published about 1 month ago • updated about 1 hour ago
## Submission metadata | Field | Value | |---|---| | Ecosystem | npm | | Package | `nodemailer` | | Repository | https://github.com/nodemailer/nod...
Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception
GHSA-r7g4-qg5f-qqm2 CVE-2026-82662 HIGH published 5 months ago • updated about 1 hour ago
### Summary Nodemailer disables TLS certificate verification in its internal HTTPS fetch client through the use of rejectUnauthorized: false inside...
Recent PRs
Package Details
Name: nodemailer
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/nodemailer
JSON API: View JSON
Security Advisories

27

Active advisories
CRITICAL 1
HIGH 6
MODERATE 19
LOW 1
View All npm Advisories
Package Information
Description:

Easy as cake e-mail sending from your Node.js applications

Repository: https://github.com/nodemailer/nodemailer
Homepage: https://nodemailer.com/
Latest Release: 7.0.3
over 1 year ago
Dependent Repos: 214,737
Dependent Packages: 5,947
Downloads: 23,450,333
Ranking: Top 0.071% by dependent repos Top 0.0746% by downloads Top 0.015% by dependent pkgs
PR Status
Open 4,158 (53.7%)
Merged 315 (4.1%)
Closed 3,062 (39.5%)
PR Types
Major 4,272 (55.2%)
Minor 442 (5.7%)
Patch 2,762 (35.7%)
Removal 58 (0.7%)