StackRadar

GHSA-m943-m63m-w62w

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 18,232 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient

Carried by container images the latest versions of 215 of 18,232 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+58 more10.1.4199
OSV records
GHSA-m943-m63m-w62w

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4

Open the chart page →

5,551
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4

Open the chart page →

4,435
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
joplin/server:latestd951ce50b6d3
nodemailer@6.10.1
10.1.4

Open the chart page →

6,106
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
nodemailer@4.7.0
10.1.4

Open the chart page →

8,538
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4

Open the chart page →

7,005
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4

Open the chart page →

2,528
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4

Open the chart page →

692
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4

Open the chart page →

2,075
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4

Open the chart page →

3,815
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4

Open the chart page →

72,567
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
nodemailer@6.9.1
10.1.4

Open the chart page →

2,699
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4

Open the chart page →

4,381
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry GHSA-m943-m63m-w62w.

Container imageDigestPackageFixed in
library/kibana:8.19.224116dd6a5838
nodemailer@9.0.4
10.1.4

Open the chart page →

1,844

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.1.4
1
nocodb/nocodb:0.258.06779a4ddedf2
nodemailer@6.9.16
10.1.4
1
nocodb/nocodb:0.301.5d9516f0bf546
nodemailer@7.0.13
10.1.4
1
nocodb/nocodb:lateste8fee91b205b
nodemailer@10.1.2
10.1.4
1
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
nodemailer@6.6.2
10.1.4
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
nodemailer@6.7.2
10.1.4
1
oneuptime/nginx:release64cc9c60a76a
nodemailer@10.0.12
10.1.4
1
oneuptime/probe:releasedd75b4631455
nodemailer@10.0.12
10.1.4
1
oneuptime/runner:releasea99da95a0490
nodemailer@10.0.12
10.1.4
1
outlinewiki/outline:1.11.008ee9ffdb847
nodemailer@10.0.12
10.1.4
1
outlinewiki/outline:0.82.0494dfb9249a6
nodemailer@6.10.0
10.1.4
1
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.1.4
1
rajnandan1/kener:3.2.1930407afca731
nodemailer@6.10.0
10.1.4
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
nodemailer@8.0.3
10.1.4
1
requarks/wiki:canary-2.5.2438b5865a7386c
nodemailer@6.4.14
10.1.4
1
requarks/wiki:2e4708eed80c0
nodemailer@6.9.1
10.1.4
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
nodemailer@8.0.7
10.1.4
1
shinobisystems/shinobi:dev3ca746937856
nodemailer@6.6.1
10.1.4
1
shinobisystems/shinobi:latestc2f5ce2e1067
nodemailer@6.6.1
10.1.4
1
solidproject/community-server:6.0.2ccc4acb7e9a1
nodemailer@6.9.1
10.1.4
1
soulteary/cronicle:0.9.80ac2512fa6e39
nodemailer@6.10.0
10.1.4
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
nodemailer@6.7.5
10.1.4
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.26.379f14a2bf931
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
nodemailer@6.9.9
10.1.4
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
nodemailer@6.9.9
10.1.4
1
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.1.4
1
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.1.4
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
nodemailer@6.7.2
10.1.4
1
twentycrm/twenty:v2.49.080e1b33b0b4b
nodemailer@10.0.12
10.1.4
1
twentycrm/twenty:latest91793759486e
nodemailer@10.0.12
10.1.4
1
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.1.4
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.1.4
1
unleashorg/unleash-server:7.5.09adb37e399ba
nodemailer@7.0.11
10.1.4
1
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
nodemailer@10.0.13
10.1.4
1
zimengxiong/excalidash-backend:0.6.529937c62fbed
nodemailer@10.0.13
10.1.4
1
zooz/predator:1.6f491d1f7a865
nodemailer@6.7.3
10.1.4
1
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
nodemailer@6.9.13
10.1.4
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
nodemailer@6.9.13
10.1.4
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
nodemailer@10.0.2
10.1.4
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
nodemailer@7.0.13
10.1.4
1
ghcr.io/bluesky-social/pds:0.4048b1ca07690
nodemailer@6.10.1
10.1.4
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
nodemailer@6.10.1
10.1.4
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
nodemailer@6.10.1
10.1.4
1
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.1.4
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.