CVE-2026-82661 | Nodemailer up to 8.0.8 List Comment Sanitization crlf injection

August 31, 2026 Yanac

A vulnerability described as critical has been identified in Nodemailer up to 8.0.8. This affects an unknown function of the component List Comment Sanitization. Such manipulation of the argument Comment leads to crlf injection.

This vulnerability is uniquely identified as CVE-2026-82661. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More