An open index of dependabot pull requests across open source projects.

nodemailer

Ecosystem:
npm
Package URL:
pkg:npm/nodemailer
Total PRs:
6,646 Dependabot PRs
Latest PR:
about 12 hours ago
Unique Repositories:
3,703 repositories
Unique Repos (30 days):
191 repositories
Security Advisories
Header injection in nodemailer
GHSA-hwqf-gcqm-7353 CVE-2021-23400 MODERATE published over 4 years ago • updated 4 days ago
The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage return...
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
GHSA-rcmh-qjqh-p98v CVE-2025-14874 HIGH published 6 months ago • updated about 17 hours ago
### Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. ### Details According to **RFC 5322**, nested ...
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
GHSA-mm7p-fcc7-pg87 CVE-2025-13033 MODERATE published 8 months ago • updated 7 days ago
The email parsing library incorrectly handles quoted local-parts containing @. This leads to misrouting of email recipients, where the parser extra...
Command injection in nodemailer
GHSA-48ww-j4fc-435p CVE-2020-7769 CRITICAL published about 5 years ago • updated 4 days ago
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendm...
Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter
GHSA-c7w3-x93f-qmm8 LOW published 2 months ago • updated 12 days ago
### Summary When a custom `envelope` object is passed to `sendMail()` with a `size` property containing CRLF characters (`\r\n`), the value is conc...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: nodemailer
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/nodemailer
JSON API: View JSON
Security Advisories

7

Active advisories
CRITICAL 1
HIGH 1
MODERATE 4
LOW 1
View All npm Advisories
Package Information
Description:

Easy as cake e-mail sending from your Node.js applications

Repository: https://github.com/nodemailer/nodemailer
Homepage: https://nodemailer.com/
Latest Release: 7.0.3
about 1 year ago
Dependent Repos: 214,737
Dependent Packages: 5,947
Downloads: 23,450,333
Ranking: Top 0.071% by dependent repos Top 0.0746% by downloads Top 0.015% by dependent pkgs
PR Status
Open 3,640 (54.8%)
Merged 314 (4.7%)
Closed 2,477 (37.3%)
PR Types
Major 3,762 (56.6%)
Minor 127 (1.9%)
Patch 2,484 (37.4%)
Removal 58 (0.9%)