[Git][security-tracker-team/security-tracker][master] Add four new node-nodemailer issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b4d285e4 by Salvatore Bonaccorso at 2026-10-15T11:27:46+02:00
Add four new node-nodemailer issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -165,13 +165,17 @@ CVE-2026-110904 (ApostropheCMS before 4.33.0 allows authentication bypass for RE
 CVE-2026-110873 (Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulner ...)
 	TODO: check
 CVE-2026-110872 (Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity d ...)
-	TODO: check
+	- node-nodemailer 10.0.10+~8.0.1-1
+	NOTE: https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc
 CVE-2026-110871 (Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vuln ...)
-	TODO: check
+	- node-nodemailer 10.0.10+~8.0.1-1
+	NOTE: https://github.com/nodemailer/nodemailer/security/advisories/GHSA-39m8-27wv-hr27
 CVE-2026-110870 (Nodemailer from 3.0.0 before 10.0.13 contains an improper input valida ...)
-	TODO: check
+	- node-nodemailer 10.0.13+~8.0.2-1
+	NOTE: https://github.com/nodemailer/nodemailer/security/advisories/GHSA-g73g-hqqh-jr95
 CVE-2026-110869 (Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of ser ...)
-	TODO: check
+	- node-nodemailer 10.0.13+~8.0.2-1
+	NOTE: https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx
 CVE-2026-110868 (Renovate before 44.79.0 contains a server-side request forgery vulnera ...)
 	NOT-FOR-US: Renovate
 CVE-2026-110867 (Renovate before 44.60.1 contains an allowlist bypass vulnerability tha ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4d285e4571c9643523cf1e86c8a139422ff6762

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4d285e4571c9643523cf1e86c8a139422ff6762
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/aac438f9/attachment.htm>