VULNERABILITY INTELLIGENCE

CVE-2020-7769

CVSS score9.8 CRITICAL

EPSS probability2.30%

CISA KEVNot currently listed

Published2020-11-12

Last modified2026-06-17

Description

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.