https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 18:58:18 +0000 https://db.gcve.eu/vuln/cve-2026-121426 <p><strong>Affected:</strong> nodemailer</p> <p>Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a &#39;&gt;&#39; inside a quoted local part, comment or domain literal. Attackers can submit addresses that validate as an allowed domain but are delivered to an attacker-controlled domain, bypassing recipient allow lists and disclosing message content.</p> <p><strong>Affected:</strong> nodemailer</p> <p>Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a &#39;&gt;&#39; inside a quoted local part, comment or domain literal. Attackers can submit addresses that validate as an allowed domain but are delivered to an attacker-controlled domain, bypassing recipient allow lists and disclosing message content.</p> https://db.gcve.eu/vuln/cve-2026-121426