github_osv/GHSA-48ww-j4fc-435p
Command injection in nodemailer
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
gitlab/npm/nodemailer/CVE-2020-7769
Injection Vulnerability
Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending emails.