Skip to content
OpenAdvisories

Package · npm

mailgen

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 2.9
    CVE-2025-62380

    Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails

    mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.31 contain an HTML injection vulnerability in plaintext emails generated with the generatePlaintext method when user generated con…

    eladnava mailgen mailgen npm
  • Low 2.9
    CVE-2025-62366

    Mailgen vulnerable to HTML injection and cross-site scripting via plaintext email generation

    mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.30 contain an HTML injection vulnerability in plaintext emails produced by the generatePlaintext method when user‑generated conten…

    eladnava mailgen mailgen npm
  • Low 2.7
    CVE-2025-59526

    Mailgen: HTML injection vulnerability in plaintext e-mails

    mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0.30, there is an HTML injection vulnerability in plaintext e-mails generated by Mailgen. Projects are affected if the Mailgen.generatePlain…

    eladnava mailgen mailgen npm