StackRadar

GHSA-85x2-q946-cp5h

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-85x2-q946-cp5h

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4
1
nocodb/nocodb:0.258.06779a4ddedf2
nodemailer@6.9.16
10.1.4
1
nocodb/nocodb:0.301.5d9516f0bf546
nodemailer@7.0.13
10.1.4
1
nocodb/nocodb:lateste8fee91b205b
nodemailer@10.1.2
10.1.4
1
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
nodemailer@6.6.2
10.1.4
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
nodemailer@6.7.2
10.1.4
1
oneuptime/nginx:release64cc9c60a76a
nodemailer@10.0.12
10.1.4
1
oneuptime/probe:releasedd75b4631455
nodemailer@10.0.12
10.1.4
1
oneuptime/runner:releasea99da95a0490
nodemailer@10.0.12
10.1.4
1
outlinewiki/outline:1.11.008ee9ffdb847
nodemailer@10.0.12
10.1.4
1
outlinewiki/outline:0.82.0494dfb9249a6
nodemailer@6.10.0
10.1.4
1
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4
1
rajnandan1/kener:3.2.1930407afca731
nodemailer@6.10.0
10.1.4
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4
1
requarks/wiki:canary-2.5.2438b5865a7386c
nodemailer@6.4.14
10.1.4
1
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
nodemailer@8.0.7
10.1.4
1
shinobisystems/shinobi:dev3ca746937856
nodemailer@6.6.1
10.1.4
1
shinobisystems/shinobi:latestc2f5ce2e1067
nodemailer@6.6.1
10.1.4
1
solidproject/community-server:6.0.2ccc4acb7e9a1
nodemailer@6.9.1
10.1.4
1
soulteary/cronicle:0.9.80ac2512fa6e39
nodemailer@6.10.0
10.1.4
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
nodemailer@6.7.5
10.1.4
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.26.379f14a2bf931
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
nodemailer@6.9.9
10.1.4
1
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4
1
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
nodemailer@6.7.2
10.1.4
1
twentycrm/twenty:v2.49.080e1b33b0b4b
nodemailer@10.0.12
10.1.4
1
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4
1
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4
1
unleashorg/unleash-server:7.5.09adb37e399ba
nodemailer@7.0.11
10.1.4
1
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
nodemailer@10.0.13
10.1.4
1
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4
1
zooz/predator:1.6f491d1f7a865
nodemailer@6.7.3
10.1.4
1
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
nodemailer@6.9.13
10.1.4
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
nodemailer@6.9.13
10.1.4
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
nodemailer@10.0.2
10.1.4
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
nodemailer@7.0.13
10.1.4
1
ghcr.io/bluesky-social/pds:0.4048b1ca07690
nodemailer@6.10.1
10.1.4
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
nodemailer@6.10.1
10.1.4
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
nodemailer@6.10.1
10.1.4
1
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.