2020-11-12 08:30:17
snyk
PUBLISHED
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.