StackRadar

GHSA-85x2-q946-cp5h

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-85x2-q946-cp5h

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-85x2-q946-cp5h.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
nodemailer@4.7.0
10.1.4
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
nodemailer@6.9.1
10.1.4
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nodemailer@6.8.0
10.1.4
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
nodemailer@6.10.0
10.1.4
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
nodemailer@7.0.13
10.1.4
3
governify/registry:v3.4.0d3f37f4f8168
nodemailer@6.6.0
10.1.4
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nodemailer@6.9.14
10.1.4
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
nodemailer@10.0.16
10.1.4
2
joplin/server:3.7.2:latest3f7b852959aa
nodemailer@6.10.1
10.1.4
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
nodemailer@9.0.3
10.1.4
2
library/ghost:6.71.000032f157262
nodemailer@10.0.16
10.1.4
2
louislam/uptime-kuma:1.23.1396510915e6be
nodemailer@6.9.13
10.1.4
2
louislam/uptime-kuma:2.5.69912da7d7d9b
nodemailer@7.0.13
10.1.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
nodemailer@7.0.13
10.1.4
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nodemailer@6.9.0
10.1.4
2
n8nio/n8n:2.36.714c4285bc303
nodemailer@8.0.10
10.1.4
2
outlinewiki/outline:0.69.1d060dcd8f9aa
nodemailer@6.9.1
10.1.4
2
requarks/wiki:2:latestfffff288a52f
nodemailer@6.9.1
10.1.4
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
nodemailer@6.9.13
10.1.4
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
nodemailer@9.0.3
10.1.4
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
nodemailer@10.0.13
10.1.4
2
activepieces/activepieces:0.92.326daa5e1807f
nodemailer@9.1.1
10.1.4
1
activepieces/activepieces:0.28.0a12efde0c535
nodemailer@6.9.9
10.1.4
1
activepieces/activepieces:0.23.0c26188b44e62
nodemailer@6.9.9
10.1.4
1
advplyr/audiobookshelf:2.37.2b897c33f0597
nodemailer@6.9.13
10.1.4
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
nodemailer@6.4.16
10.1.4
1
automatischio/automatisch:0.15.03bace7a12d5f
nodemailer@6.7.0
10.1.4
1
baptistearno/typebot-builder:latest9b277e31c847
nodemailer@9.0.1
10.1.4
1
bnjbvr/kresus:0.22.137e216b182c8
nodemailer@6.9.16
10.1.4
1
budibase/apps:3.41.344fe6feab985
nodemailer@9.0.1
10.1.4
1
budibase/worker:3.41.3de5e2e560ce8
nodemailer@9.0.3
10.1.4
1
chocobozzz/peertube:v8.1.5052712130691
nodemailer@7.0.13
10.1.4
1
cnieg/maildev:v1.1.998ee05668915
nodemailer@5.0.0
10.1.4
1
countly/api:25.05.4f4cc7447c4f5
nodemailer@6.9.13
10.1.4
1
countly/countly-server:25.05.4e3c238248f99
nodemailer@6.9.13
10.1.4
1
countly/frontend:25.05.42acbc11499b6
nodemailer@6.9.13
10.1.4
1
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
nodemailer@10.0.13
10.1.4
1
directus/directus:12.0.29c8470ea465c
nodemailer@8.0.5
10.1.4
1
directus/directus:11.1.0e3c8bb975350
nodemailer@6.9.14
10.1.4
1
diygod/rsshub:2025-11-097a6312cac0d5
nodemailer@7.0.10
10.1.4
1
docmost/docmost:0.96.0b56947fcfd08
nodemailer@9.0.1
10.1.4
1
drumsergio/lynxprompt:2.1.40e66bb00c2696
nodemailer@10.1.0
10.1.4
1
etherpad/etherpad:latest3d59d633d285
nodemailer@10.1.2
10.1.4
1
etherpad/etherpad:3.3.6:latest98d395769b3b
nodemailer@10.0.10
10.1.4
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
nodemailer@6.9.3
10.1.4
1
fallenbagel/jellyseerr:latest91edd5620e51
nodemailer@6.9.16
10.1.4
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
nodemailer@6.9.13
10.1.4
1
fiware/idm:8.3.3a1b6ed4ae84f
nodemailer@6.7.8
10.1.4
1
fosrl/pangolin:latest5039d0e64a2e
nodemailer@10.1.1
10.1.4
1
fosrl/pangolin:1.13.0c32ad797ab96
nodemailer@7.0.11
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.