CVE-2020-7769
Published
CVSS v3
8.6
HIGH
CVSS v2
7.5
HIGH
Affected
1
PROJECT
Description
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
GitHub