CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3455

Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote " to the URL with embedded malicious JavaScript code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 15.0%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2026-3455

Nodemailer » Mailparser » Version: 0.1.1

cpe:2.3:a:nodemailer:mailparser:0.1.1
Nodemailer » Mailparser » Version: 0.1.2

cpe:2.3:a:nodemailer:mailparser:0.1.2
Nodemailer » Mailparser » Version: 0.1.3

cpe:2.3:a:nodemailer:mailparser:0.1.3
Nodemailer » Mailparser » Version: 0.2.0

cpe:2.3:a:nodemailer:mailparser:0.2.0
Nodemailer » Mailparser » Version: 0.2.10

cpe:2.3:a:nodemailer:mailparser:0.2.10
Nodemailer » Mailparser » Version: 0.2.11

cpe:2.3:a:nodemailer:mailparser:0.2.11
Nodemailer » Mailparser » Version: 0.2.12

cpe:2.3:a:nodemailer:mailparser:0.2.12
Nodemailer » Mailparser » Version: 0.2.13

cpe:2.3:a:nodemailer:mailparser:0.2.13
Nodemailer » Mailparser » Version: 0.2.14

cpe:2.3:a:nodemailer:mailparser:0.2.14
Nodemailer » Mailparser » Version: 0.2.15

cpe:2.3:a:nodemailer:mailparser:0.2.15
Nodemailer » Mailparser » Version: 0.2.17

cpe:2.3:a:nodemailer:mailparser:0.2.17
Nodemailer » Mailparser » Version: 0.2.18

cpe:2.3:a:nodemailer:mailparser:0.2.18
Nodemailer » Mailparser » Version: 0.2.19

cpe:2.3:a:nodemailer:mailparser:0.2.19
Nodemailer » Mailparser » Version: 0.2.2

cpe:2.3:a:nodemailer:mailparser:0.2.2
Nodemailer » Mailparser » Version: 0.2.21

cpe:2.3:a:nodemailer:mailparser:0.2.21
Nodemailer » Mailparser » Version: 0.2.22

cpe:2.3:a:nodemailer:mailparser:0.2.22
Nodemailer » Mailparser » Version: 0.2.23

cpe:2.3:a:nodemailer:mailparser:0.2.23
Nodemailer » Mailparser » Version: 0.2.24

cpe:2.3:a:nodemailer:mailparser:0.2.24
Nodemailer » Mailparser » Version: 0.2.25

cpe:2.3:a:nodemailer:mailparser:0.2.25
Nodemailer » Mailparser » Version: 0.2.26

cpe:2.3:a:nodemailer:mailparser:0.2.26
Nodemailer » Mailparser » Version: 0.2.28

cpe:2.3:a:nodemailer:mailparser:0.2.28
Nodemailer » Mailparser » Version: 0.2.29

cpe:2.3:a:nodemailer:mailparser:0.2.29
Nodemailer » Mailparser » Version: 0.2.3

cpe:2.3:a:nodemailer:mailparser:0.2.3
Nodemailer » Mailparser » Version: 0.2.30

cpe:2.3:a:nodemailer:mailparser:0.2.30
Nodemailer » Mailparser » Version: 0.2.31

cpe:2.3:a:nodemailer:mailparser:0.2.31
Nodemailer » Mailparser » Version: 0.2.32

cpe:2.3:a:nodemailer:mailparser:0.2.32
Nodemailer » Mailparser » Version: 0.2.33

cpe:2.3:a:nodemailer:mailparser:0.2.33
Nodemailer » Mailparser » Version: 0.2.4

cpe:2.3:a:nodemailer:mailparser:0.2.4
Nodemailer » Mailparser » Version: 0.2.6

cpe:2.3:a:nodemailer:mailparser:0.2.6
Nodemailer » Mailparser » Version: 0.2.7

cpe:2.3:a:nodemailer:mailparser:0.2.7
Nodemailer » Mailparser » Version: 0.2.8

cpe:2.3:a:nodemailer:mailparser:0.2.8
Nodemailer » Mailparser » Version: 0.2.9

cpe:2.3:a:nodemailer:mailparser:0.2.9
Nodemailer » Mailparser » Version: 0.3.0

cpe:2.3:a:nodemailer:mailparser:0.3.0
Nodemailer » Mailparser » Version: 0.3.1

cpe:2.3:a:nodemailer:mailparser:0.3.1
Nodemailer » Mailparser » Version: 0.3.2

cpe:2.3:a:nodemailer:mailparser:0.3.2
Nodemailer » Mailparser » Version: 0.3.3

cpe:2.3:a:nodemailer:mailparser:0.3.3
Nodemailer » Mailparser » Version: 0.3.4

cpe:2.3:a:nodemailer:mailparser:0.3.4
Nodemailer » Mailparser » Version: 0.3.5

cpe:2.3:a:nodemailer:mailparser:0.3.5
Nodemailer » Mailparser » Version: 0.3.6

cpe:2.3:a:nodemailer:mailparser:0.3.6
Nodemailer » Mailparser » Version: 0.4.0

cpe:2.3:a:nodemailer:mailparser:0.4.0
Nodemailer » Mailparser » Version: 0.4.1

cpe:2.3:a:nodemailer:mailparser:0.4.1
Nodemailer » Mailparser » Version: 0.4.2

cpe:2.3:a:nodemailer:mailparser:0.4.2
Nodemailer » Mailparser » Version: 0.4.4

cpe:2.3:a:nodemailer:mailparser:0.4.4
Nodemailer » Mailparser » Version: 0.4.5

cpe:2.3:a:nodemailer:mailparser:0.4.5
Nodemailer » Mailparser » Version: 0.4.6

cpe:2.3:a:nodemailer:mailparser:0.4.6
Nodemailer » Mailparser » Version: 0.4.7

cpe:2.3:a:nodemailer:mailparser:0.4.7
Nodemailer » Mailparser » Version: 0.4.8

cpe:2.3:a:nodemailer:mailparser:0.4.8
Nodemailer » Mailparser » Version: 0.4.9

cpe:2.3:a:nodemailer:mailparser:0.4.9
Nodemailer » Mailparser » Version: 0.5.0

cpe:2.3:a:nodemailer:mailparser:0.5.0
Nodemailer » Mailparser » Version: 0.5.1

cpe:2.3:a:nodemailer:mailparser:0.5.1
Nodemailer » Mailparser » Version: 0.5.2

cpe:2.3:a:nodemailer:mailparser:0.5.2
Nodemailer » Mailparser » Version: 0.5.3

cpe:2.3:a:nodemailer:mailparser:0.5.3
Nodemailer » Mailparser » Version: 0.6.0

cpe:2.3:a:nodemailer:mailparser:0.6.0
Nodemailer » Mailparser » Version: 0.6.1

cpe:2.3:a:nodemailer:mailparser:0.6.1
Nodemailer » Mailparser » Version: 0.6.2

cpe:2.3:a:nodemailer:mailparser:0.6.2
Nodemailer » Mailparser » Version: 2.0.0

cpe:2.3:a:nodemailer:mailparser:2.0.0
Nodemailer » Mailparser » Version: 2.0.1

cpe:2.3:a:nodemailer:mailparser:2.0.1
Nodemailer » Mailparser » Version: 2.0.2

cpe:2.3:a:nodemailer:mailparser:2.0.2
Nodemailer » Mailparser » Version: 2.0.3

cpe:2.3:a:nodemailer:mailparser:2.0.3
Nodemailer » Mailparser » Version: 2.0.4

cpe:2.3:a:nodemailer:mailparser:2.0.4
Nodemailer » Mailparser » Version: 2.0.5

cpe:2.3:a:nodemailer:mailparser:2.0.5
Nodemailer » Mailparser » Version: 2.1.0

cpe:2.3:a:nodemailer:mailparser:2.1.0
Nodemailer » Mailparser » Version: 2.2.0

cpe:2.3:a:nodemailer:mailparser:2.2.0
Nodemailer » Mailparser » Version: 2.3.0

cpe:2.3:a:nodemailer:mailparser:2.3.0
Nodemailer » Mailparser » Version: 2.3.1

cpe:2.3:a:nodemailer:mailparser:2.3.1
Nodemailer » Mailparser » Version: 2.3.2

cpe:2.3:a:nodemailer:mailparser:2.3.2
Nodemailer » Mailparser » Version: 2.3.3

cpe:2.3:a:nodemailer:mailparser:2.3.3
Nodemailer » Mailparser » Version: 2.3.4

cpe:2.3:a:nodemailer:mailparser:2.3.4
Nodemailer » Mailparser » Version: 2.4.0

cpe:2.3:a:nodemailer:mailparser:2.4.0
Nodemailer » Mailparser » Version: 2.4.1

cpe:2.3:a:nodemailer:mailparser:2.4.1
Nodemailer » Mailparser » Version: 2.4.2

cpe:2.3:a:nodemailer:mailparser:2.4.2
Nodemailer » Mailparser » Version: 2.4.3

cpe:2.3:a:nodemailer:mailparser:2.4.3
Nodemailer » Mailparser » Version: 2.5.0

cpe:2.3:a:nodemailer:mailparser:2.5.0
Nodemailer » Mailparser » Version: 2.6.0

cpe:2.3:a:nodemailer:mailparser:2.6.0
Nodemailer » Mailparser » Version: 2.7.0

cpe:2.3:a:nodemailer:mailparser:2.7.0
Nodemailer » Mailparser » Version: 2.7.1

cpe:2.3:a:nodemailer:mailparser:2.7.1
Nodemailer » Mailparser » Version: 2.7.2

cpe:2.3:a:nodemailer:mailparser:2.7.2
Nodemailer » Mailparser » Version: 2.7.3

cpe:2.3:a:nodemailer:mailparser:2.7.3
Nodemailer » Mailparser » Version: 2.7.4

cpe:2.3:a:nodemailer:mailparser:2.7.4
Nodemailer » Mailparser » Version: 2.7.5

cpe:2.3:a:nodemailer:mailparser:2.7.5
Nodemailer » Mailparser » Version: 2.7.6

cpe:2.3:a:nodemailer:mailparser:2.7.6
Nodemailer » Mailparser » Version: 2.7.7

cpe:2.3:a:nodemailer:mailparser:2.7.7
Nodemailer » Mailparser » Version: 2.8.0

cpe:2.3:a:nodemailer:mailparser:2.8.0
Nodemailer » Mailparser » Version: 2.8.1

cpe:2.3:a:nodemailer:mailparser:2.8.1
Nodemailer » Mailparser » Version: 3.0.0

cpe:2.3:a:nodemailer:mailparser:3.0.0
Nodemailer » Mailparser » Version: 3.0.1

cpe:2.3:a:nodemailer:mailparser:3.0.1
Nodemailer » Mailparser » Version: 3.1.0

cpe:2.3:a:nodemailer:mailparser:3.1.0
Nodemailer » Mailparser » Version: 3.2.0

cpe:2.3:a:nodemailer:mailparser:3.2.0
Nodemailer » Mailparser » Version: 3.3.0

cpe:2.3:a:nodemailer:mailparser:3.3.0
Nodemailer » Mailparser » Version: 3.3.1

cpe:2.3:a:nodemailer:mailparser:3.3.1
Nodemailer » Mailparser » Version: 3.3.2

cpe:2.3:a:nodemailer:mailparser:3.3.2
Nodemailer » Mailparser » Version: 3.3.3

cpe:2.3:a:nodemailer:mailparser:3.3.3
Nodemailer » Mailparser » Version: 3.4.0

cpe:2.3:a:nodemailer:mailparser:3.4.0
Nodemailer » Mailparser » Version: 3.5.0

cpe:2.3:a:nodemailer:mailparser:3.5.0
Nodemailer » Mailparser » Version: 3.6.0

cpe:2.3:a:nodemailer:mailparser:3.6.0
Nodemailer » Mailparser » Version: 3.6.1

cpe:2.3:a:nodemailer:mailparser:3.6.1
Nodemailer » Mailparser » Version: 3.6.2

cpe:2.3:a:nodemailer:mailparser:3.6.2
Nodemailer » Mailparser » Version: 3.6.3

cpe:2.3:a:nodemailer:mailparser:3.6.3
Nodemailer » Mailparser » Version: 3.6.4

cpe:2.3:a:nodemailer:mailparser:3.6.4
Nodemailer » Mailparser » Version: 3.6.5

cpe:2.3:a:nodemailer:mailparser:3.6.5
Nodemailer » Mailparser » Version: 3.6.6

cpe:2.3:a:nodemailer:mailparser:3.6.6
Nodemailer » Mailparser » Version: 3.6.7

cpe:2.3:a:nodemailer:mailparser:3.6.7
Nodemailer » Mailparser » Version: 3.6.8

cpe:2.3:a:nodemailer:mailparser:3.6.8
Nodemailer » Mailparser » Version: 3.6.9

cpe:2.3:a:nodemailer:mailparser:3.6.9
Nodemailer » Mailparser » Version: 3.7.0

cpe:2.3:a:nodemailer:mailparser:3.7.0
Nodemailer » Mailparser » Version: 3.7.1

cpe:2.3:a:nodemailer:mailparser:3.7.1
Nodemailer » Mailparser » Version: 3.7.2

cpe:2.3:a:nodemailer:mailparser:3.7.2
Nodemailer » Mailparser » Version: 3.7.3

cpe:2.3:a:nodemailer:mailparser:3.7.3
Nodemailer » Mailparser » Version: 3.7.4

cpe:2.3:a:nodemailer:mailparser:3.7.4
Nodemailer » Mailparser » Version: 3.7.5

cpe:2.3:a:nodemailer:mailparser:3.7.5
Nodemailer » Mailparser » Version: 3.8.0

cpe:2.3:a:nodemailer:mailparser:3.8.0
Nodemailer » Mailparser » Version: 3.8.1

cpe:2.3:a:nodemailer:mailparser:3.8.1
Nodemailer » Mailparser » Version: 3.9.0

cpe:2.3:a:nodemailer:mailparser:3.9.0
Nodemailer » Mailparser » Version: 3.9.1

cpe:2.3:a:nodemailer:mailparser:3.9.1
Nodemailer » Mailparser » Version: 3.9.2

cpe:2.3:a:nodemailer:mailparser:3.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3455

Products

Pricing

Contact Us