CVE-2026-121426 - Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser
CVE ID :CVE-2026-121426 Published : Nov. 3, 2026, 2:28 p.m. | 36 minutes ago Description :Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a '>' inside a quoted local part, comment or domain literal. Attackers can submit...