nodemailer

Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

Command injection in nodemailer

Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion

Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict

Header injection in nodemailer

Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

nodemailer.js is malware

nodemailer-js is malware

Malicious code in noirxnodemailer (npm)