Nodemailer CRLF Injection via List-* Header Comments

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-82661 · CVE overview and exploitation status

EUVD-2026-68439

GHSA-2jv2-wqrj-g6x7

GHSA-268h-hp4c-crq3

cve-program · CVE-2026-82661

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-268h-hp4c-crq3
• https://www.vulncheck.com/advisories/nodemailer-crlf-injection-via-list-header-comments

euvd · EUVD-2026-68439

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-268h-hp4c-crq3
• https://www.vulncheck.com/advisories/nodemailer-crlf-injection-via-list-header-comments

nvd · CVE-2026-82661

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-268h-hp4c-crq3
• https://www.vulncheck.com/advisories/nodemailer-crlf-injection-via-list-header-comments

osv · GHSA-268h-hp4c-crq3

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-268h-hp4c-crq3
• https://github.com/nodemailer/nodemailer

No related changes are available here.