← Back to CVE List
CVE-2020-7769
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt