StackRadar

GHSA-8c8m-p3m8-cjg8

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-8c8m-p3m8-cjg8

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-8c8m-p3m8-cjg8.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
nodemailer@4.7.0
10.1.4
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
nodemailer@6.9.1
10.1.4
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nodemailer@6.8.0
10.1.4
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
nodemailer@6.10.0
10.1.4
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
nodemailer@7.0.13
10.1.4
3
governify/registry:v3.4.0d3f37f4f8168
nodemailer@6.6.0
10.1.4
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nodemailer@6.9.14
10.1.4
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
nodemailer@10.0.16
10.1.4
2
joplin/server:3.7.2:latest3f7b852959aa
nodemailer@6.10.1
10.1.4
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
nodemailer@9.0.3
10.1.4
2
library/ghost:6.71.000032f157262
nodemailer@10.0.16
10.1.4
2
louislam/uptime-kuma:1.23.1396510915e6be
nodemailer@6.9.13
10.1.4
2
louislam/uptime-kuma:2.5.69912da7d7d9b
nodemailer@7.0.13
10.1.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
nodemailer@7.0.13
10.1.4
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nodemailer@6.9.0
10.1.4
2
n8nio/n8n:2.36.714c4285bc303
nodemailer@8.0.10
10.1.4
2
outlinewiki/outline:0.69.1d060dcd8f9aa
nodemailer@6.9.1
10.1.4
2
requarks/wiki:2:latestfffff288a52f
nodemailer@6.9.1
10.1.4
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
nodemailer@6.9.13
10.1.4
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
nodemailer@9.0.3
10.1.4
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
nodemailer@10.0.13
10.1.4
2
activepieces/activepieces:0.92.326daa5e1807f
nodemailer@9.1.1
10.1.4
1
activepieces/activepieces:0.28.0a12efde0c535
nodemailer@6.9.9
10.1.4
1
activepieces/activepieces:0.23.0c26188b44e62
nodemailer@6.9.9
10.1.4
1
advplyr/audiobookshelf:2.37.2b897c33f0597
nodemailer@6.9.13
10.1.4
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
nodemailer@6.4.16
10.1.4
1
automatischio/automatisch:0.15.03bace7a12d5f
nodemailer@6.7.0
10.1.4
1
baptistearno/typebot-builder:latest9b277e31c847
nodemailer@9.0.1
10.1.4
1
bnjbvr/kresus:0.22.137e216b182c8
nodemailer@6.9.16
10.1.4
1
budibase/apps:3.41.344fe6feab985
nodemailer@9.0.1
10.1.4
1
budibase/worker:3.41.3de5e2e560ce8
nodemailer@9.0.3
10.1.4
1
chocobozzz/peertube:v8.1.5052712130691
nodemailer@7.0.13
10.1.4
1
cnieg/maildev:v1.1.998ee05668915
nodemailer@5.0.0
10.1.4
1
countly/api:25.05.4f4cc7447c4f5
nodemailer@6.9.13
10.1.4
1
countly/countly-server:25.05.4e3c238248f99
nodemailer@6.9.13
10.1.4
1
countly/frontend:25.05.42acbc11499b6
nodemailer@6.9.13
10.1.4
1
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
nodemailer@10.0.13
10.1.4
1
directus/directus:12.0.29c8470ea465c
nodemailer@8.0.5
10.1.4
1
directus/directus:11.1.0e3c8bb975350
nodemailer@6.9.14
10.1.4
1
diygod/rsshub:2025-11-097a6312cac0d5
nodemailer@7.0.10
10.1.4
1
docmost/docmost:0.96.0b56947fcfd08
nodemailer@9.0.1
10.1.4
1
drumsergio/lynxprompt:2.1.40e66bb00c2696
nodemailer@10.1.0
10.1.4
1
etherpad/etherpad:latest3d59d633d285
nodemailer@10.1.2
10.1.4
1
etherpad/etherpad:3.3.6:latest98d395769b3b
nodemailer@10.0.10
10.1.4
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
nodemailer@6.9.3
10.1.4
1
fallenbagel/jellyseerr:latest91edd5620e51
nodemailer@6.9.16
10.1.4
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
nodemailer@6.9.13
10.1.4
1
fiware/idm:8.3.3a1b6ed4ae84f
nodemailer@6.7.8
10.1.4
1
fosrl/pangolin:latest5039d0e64a2e
nodemailer@10.1.1
10.1.4
1
fosrl/pangolin:1.13.0c32ad797ab96
nodemailer@7.0.11
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.