StackRadar

GHSA-85x2-q946-cp5h

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-85x2-q946-cp5h

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
getwud/wud:8.1.1b1cd01c43839
nodemailer@6.9.16
10.1.4
1
growthbook/growthbook:5.1.0c8a124f55dca
nodemailer@10.0.10
10.1.4
1
growthbook/growthbook:latestdca716a7bf47
nodemailer@10.0.10
10.1.4
1
helmforge/strapi-base:5.52.25a6c2c449840
nodemailer@9.0.1
10.1.4
1
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
nodemailer@9.1.0
10.1.4
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
nodemailer@6.9.15
10.1.4
1
infisical/infisical:v0.166.8bb8352b71cea
nodemailer@8.0.11
10.1.4
1
jayfong/yapi:1.10.2163e5d621910
nodemailer@4.0.1
10.1.4
1
joplin/server:3.0-beta52af57880c0e
nodemailer@6.9.13
10.1.4
1
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4
1
library/ghost:6.37.01ef2e532ca4d
nodemailer@8.0.5
10.1.4
1
library/ghost:6.25.12654b1e90413
nodemailer@6.10.1
10.1.4
1
library/ghost:6.41.129773d6be407
nodemailer@8.0.5
10.1.4
1
library/ghost:4.37.0767230c0f263
nodemailer@6.7.2
10.1.4
1
library/ghost:5.79.083f7bf209844
nodemailer@6.9.9
10.1.4
1
library/ghost:6.71.0-alpine8e07c5ec63d9
nodemailer@10.0.16
10.1.4
1
library/ghost:6.72.0c0d83a8d4522
nodemailer@10.0.16
10.1.4
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
nodemailer@10.0.10
10.1.4
1
library/kibana:7.17.150172f1c538e7
nodemailer@6.6.2
10.1.4
1
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4
1
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4
1
library/kibana:7.17.8c5781ba340ef
nodemailer@6.6.2
10.1.4
1
library/kibana:7.17.3e2e2031c15be
nodemailer@6.6.2
10.1.4
1
linuxserver/overseerr:1.35.06108ed066d4a
nodemailer@6.8.0
10.1.4
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:2.0.24c364ef96aad
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:170233f4acb51
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:2.5.4917318f9d7be
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.4.091e963bfda56
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:1.18.5a84767d7934f
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
nodemailer@6.9.13
10.1.4
1
louislam/uptime-kuma:2.5.5c74379ac4509
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
nodemailer@7.0.13
10.1.4
1
maildev/maildev:2.2.1180ef51f65ee
nodemailer@6.9.14
10.1.4
1
misskey/misskey:12.110.1e08b7c478093
nodemailer@6.7.3
10.1.4
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
nodemailer@6.9.8
10.1.4
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nodemailer@6.9.7
10.1.4
1
n8nio/n8n:2.25.7761374d4eb84
nodemailer@7.0.11
10.1.4
1
n8nio/n8n:2.41.687e0bab2c931
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:1.86.08b39ed5a2de9
nodemailer@6.9.9
10.1.4
1
n8nio/n8n:0.212.0a9195bc499a3
nodemailer@6.8.0
10.1.4
1
n8nio/n8n:2.45.3bf88c3783fc4
nodemailer@10.0.14
10.1.4
1
n8nio/n8n:2.44.4c72fa9f1bd9b
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:2.36.8cfe2704ff858
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:1.33.1dd171d45102a
nodemailer@6.9.9
10.1.4
1
n8nio/n8n:0.136.0e8302e8bd402
nodemailer@6.6.3
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.