Vulnerabilities

TI-2025-38647 CVE-2025-62380 · GHSA-q4w9-x3rv-4c8j

Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails

MEDIUM 54

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.

CVSS 4.0LOW 2.9 Network No auth No interaction EPSS 0.00452 Published 2025-10-15 Fixed in 2.0.32 CWE-79

TI-2025-38634 CVE-2025-62366 · GHSA-xw6r-chmh-vpmj

MEDIUM 48

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.

CVSS 4.0LOW 2.9 Network No auth No interaction EPSS 0.00428 Published 2025-10-14 Fixed in 2.0.31 CWE-79

TI-2025-37057 CVE-2025-59526 · GHSA-j2xj-h7w5-r7vp

LOW 20

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00438 Published 2025-09-22 Fixed in 2.0.30 CWE-79