Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
nodemailer may allow attackers to read or alter messages
published 6 days ago
Summary
The email-sending library nodemailer had a security weakness that could let a malicious party view or change the messages it processes. TuxCare has released a rebuilt version that fixes the issue. Install the updated package (version 9.0.0-tuxcare.8) to protect your email communications.
What to do
- Update GitHub Actions nodemailer to version 9.0.0-tuxcare.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | nodemailer |
>= 9.0.0-tuxcare.0, < 9.0.0-tuxcare.8 Fix: upgrade to 9.0.0-tuxcare.8
|
Original advisory text
TuxCare security update for nodemailer (1 CVE)
TuxCare rebuilt nodemailer to address 1 CVE. Fixed in 9.0.0-tuxcare.8.
Timeline
Published29 Oct 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
CLSA-2026-1793267771 · OSV
Track software like this
Free during beta