StackRadar

GHSA-m943-m63m-w62w

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-m943-m63m-w62w

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
getwud/wud:8.1.1b1cd01c43839
nodemailer@6.9.16
10.1.4
1
growthbook/growthbook:5.1.0c8a124f55dca
nodemailer@10.0.10
10.1.4
1
growthbook/growthbook:latestdca716a7bf47
nodemailer@10.0.10
10.1.4
1
helmforge/strapi-base:5.52.25a6c2c449840
nodemailer@9.0.1
10.1.4
1
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
nodemailer@9.1.0
10.1.4
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
nodemailer@6.9.15
10.1.4
1
infisical/infisical:v0.166.8bb8352b71cea
nodemailer@8.0.11
10.1.4
1
jayfong/yapi:1.10.2163e5d621910
nodemailer@4.0.1
10.1.4
1
joplin/server:3.0-beta52af57880c0e
nodemailer@6.9.13
10.1.4
1
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4
1
library/ghost:6.37.01ef2e532ca4d
nodemailer@8.0.5
10.1.4
1
library/ghost:6.25.12654b1e90413
nodemailer@6.10.1
10.1.4
1
library/ghost:6.41.129773d6be407
nodemailer@8.0.5
10.1.4
1
library/ghost:4.37.0767230c0f263
nodemailer@6.7.2
10.1.4
1
library/ghost:5.79.083f7bf209844
nodemailer@6.9.9
10.1.4
1
library/ghost:6.71.0-alpine8e07c5ec63d9
nodemailer@10.0.16
10.1.4
1
library/ghost:6.72.0c0d83a8d4522
nodemailer@10.0.16
10.1.4
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
nodemailer@10.0.10
10.1.4
1
library/kibana:7.17.150172f1c538e7
nodemailer@6.6.2
10.1.4
1
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4
1
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4
1
library/kibana:7.17.8c5781ba340ef
nodemailer@6.6.2
10.1.4
1
library/kibana:7.17.3e2e2031c15be
nodemailer@6.6.2
10.1.4
1
linuxserver/overseerr:1.35.06108ed066d4a
nodemailer@6.8.0
10.1.4
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:2.0.24c364ef96aad
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:170233f4acb51
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:2.5.4917318f9d7be
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.4.091e963bfda56
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
nodemailer@6.9.16
10.1.4
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:1.18.5a84767d7934f
nodemailer@6.6.5
10.1.4
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
nodemailer@6.9.13
10.1.4
1
louislam/uptime-kuma:2.5.5c74379ac4509
nodemailer@7.0.13
10.1.4
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
nodemailer@7.0.13
10.1.4
1
maildev/maildev:2.2.1180ef51f65ee
nodemailer@6.9.14
10.1.4
1
misskey/misskey:12.110.1e08b7c478093
nodemailer@6.7.3
10.1.4
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
nodemailer@6.9.8
10.1.4
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nodemailer@6.9.7
10.1.4
1
n8nio/n8n:2.25.7761374d4eb84
nodemailer@7.0.11
10.1.4
1
n8nio/n8n:2.41.687e0bab2c931
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:1.86.08b39ed5a2de9
nodemailer@6.9.9
10.1.4
1
n8nio/n8n:0.212.0a9195bc499a3
nodemailer@6.8.0
10.1.4
1
n8nio/n8n:2.45.3bf88c3783fc4
nodemailer@10.0.14
10.1.4
1
n8nio/n8n:2.44.4c72fa9f1bd9b
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:2.36.8cfe2704ff858
nodemailer@8.0.10
10.1.4
1
n8nio/n8n:1.33.1dd171d45102a
nodemailer@6.9.9
10.1.4
1
n8nio/n8n:0.136.0e8302e8bd402
nodemailer@6.6.3
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.