npm nodemailer
productUSpkg:npm/nodemailer
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
by severity
2critical6high14medium0low
updated 2026-10-27
01
vulnerabilities (28)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2020-7769US | critical9.8 | — |
| CVE-2026-82854US | critical9.8 | — |
| CVE-2021-23400US | high8.8 | — |
| CVE-2026-82853US | medium4.9 | — |
| CVE-2026-92596US | high7.5 | — |
| CVE-2026-90776US | high7.5 | — |
| CVE-2025-14874US | — | — |
| CVE-2025-13033US | — | — |
| CVE-2024-58379US | medium5.3 | — |
| CVE-2026-92598US | medium6.5 | — |
| CVE-2026-92597US | medium6.5 | — |
| CVE-2026-110871US | medium6.5 | — |
| CVE-2026-110869US | high7.5 | — |
| CVE-2026-110872US | medium5.9 | — |
| CVE-2026-82659US | high7.1 | — |
| CVE-2026-100700US | high7.5 | — |
| CVE-2026-92595US | medium5.9 | — |
| CVE-2026-110870US | medium5.3 | — |
| CVE-2026-82661US | medium5.4 | — |
| CVE-2026-82660US | medium5.4OT elevated | — |
| CVE-2026-100702US | medium5.9 | — |
| CVE-2026-100699US | medium5.3 | — |
| CVE-2026-82662US | medium6.5 | — |
| CVE-2026-100701US | medium5.9 | — |
showing 24 of 28
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation5 CVEs
- CWE-407Inefficient Algorithmic Complexity5 CVEs
- CWE-436Interpretation Conflict5 CVEs
- CWE-400Uncontrolled Resource Consumption4 CVEs
- CWE-1333Inefficient Regular Expression Complexity3 CVEs
- CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')3 CVEs
- CWE-295Improper Certificate Validation2 CVEs
- CWE-674Uncontrolled Recursion2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USOSV.dev24 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan