Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)
Moderate severity
GitHub Reviewed
Published
Apr 7, 2026
in
nodemailer/nodemailer
•
Updated Apr 8, 2026
Give feedback on Dependabot alerts