VULNRABLE / Vulnerability / GHSA-85x2-q946-cp5h

GHSA-85x2-q946-cp5h

MEDIUM LOW nodemailer GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA

Summary

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

What this means

GHSA-85x2-q946-cp5h is a medium-severity vulnerability affecting nodemailer, rated CVSS 5.5. Published October 23, 2026.

View full advisory at GHSA →