Skip to content

Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

Low severity GitHub Reviewed Published Mar 25, 2026 in nodemailer/nodemailer

No open alerts for this advisory

Give feedback on Dependabot alerts