| Package | Affected versions | Patched versions |
|---|---|---|
| nodemailer | < 6.6.1 | 6.6.1 |
| nodemailer | < 6.6.1 | 6.6.1 |
The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free