An open index of dependabot pull requests across open source projects.

nodemailer

Ecosystem:
npm
Package URL:
pkg:npm/nodemailer
Total PRs:
6,783 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
3,794 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
GHSA-p6gq-j5cr-w38f HIGH published about 1 month ago • updated 27 days ago
# Message-level `raw` option bypasses `disableFileAccess` / `disableUrlAccess`, enabling arbitrary file read and full-response SSRF in the sent mes...
Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection
GHSA-268h-hp4c-crq3 MODERATE published about 1 month ago • updated 27 days ago
### Summary Nodemailer constructs `List-*` headers from the caller-provided `list` message option using internally prepared header values. The `li...
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
GHSA-rcmh-qjqh-p98v CVE-2025-14874 HIGH published 8 months ago • updated 12 days ago
### Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. ### Details According to **RFC 5322**, nested ...
Header injection in nodemailer
GHSA-hwqf-gcqm-7353 CVE-2021-23400 MODERATE published over 4 years ago • updated 10 days ago
The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage return...
Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization
GHSA-wqvq-jvpq-h66f MODERATE published about 1 month ago • updated 27 days ago
### Summary Nodemailer's `disableFileAccess` and `disableUrlAccess` options are intended to prevent message content and attachments from reading l...
Recent PRs
Package Details
Name: nodemailer
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/nodemailer
JSON API: View JSON
Security Advisories

11

Active advisories
CRITICAL 1
HIGH 2
MODERATE 7
LOW 1
View All npm Advisories
Package Information
Description:

Easy as cake e-mail sending from your Node.js applications

Repository: https://github.com/nodemailer/nodemailer
Homepage: https://nodemailer.com/
Latest Release: 7.0.3
about 1 year ago
Dependent Repos: 214,737
Dependent Packages: 5,947
Downloads: 23,450,333
Ranking: Top 0.071% by dependent repos Top 0.0746% by downloads Top 0.015% by dependent pkgs
PR Status
Open 3,704 (54.6%)
Merged 315 (4.6%)
Closed 2,554 (37.7%)
PR Types
Major 3,861 (56.9%)
Minor 128 (1.9%)
Patch 2,526 (37.2%)
Removal 58 (0.9%)