{"schemaVersion":3,"id":"CVE-2025-13033","aliases":["UBUNTU-CVE-2025-13033","DEBIAN-CVE-2025-13033","CGA-5x9x-g5c8-47rj","CGA-j2hf-36hm-g687","CGA-jgx8-326p-ffgw","GHSA-mm7p-fcc7-pg87","CGA-2398-rv28-j52j","CGA-2cgp-j38v-p78r","CGA-2crf-5vc6-q8j8","CGA-3gcp-vpm5-hfpp","CGA-3w83-89fw-gmpj","CGA-5p6h-j77g-jf53","CGA-65f7-6hx3-4fgc","CGA-66q3-qcr8-8p99","CGA-6j8p-69wj-jj4w","CGA-6mvv-g9hq-9hwc","CGA-7vcx-45j5-h76g","CGA-8422-5vx4-9q66","CGA-8c7x-rhwv-j545","CGA-8hwm-9wvc-rj7j","CGA-8rv4-2v5c-68fq","CGA-9xm2-xhgm-8599","CGA-c84c-c7qq-vfg8","CGA-cp6m-v3g2-cfp6","CGA-f99q-cf72-r3gv","CGA-ffxw-m293-wr53","CGA-fw35-f43p-ghgj","CGA-fwxv-w5mf-vw9q","CGA-gw9x-6w9v-vfxg","CGA-mgcj-w2qp-pf6g","CGA-p9q9-3qqf-hwwj","CGA-pg5f-82jx-vf6j","CGA-pxf7-5xmh-jx2w","CGA-qcj7-c64q-226q","CGA-qx7h-8wfw-447m","CGA-r38g-q3m3-g3fj","CGA-vgjg-v4fc-5h89","CGA-vpxg-cj54-p3h2","CGA-wx47-p59x-c3r2","CGA-x6hp-m2pp-qr3w","CGA-x7vv-jw9q-qwf9","CGA-xvq4-q3rf-xr6w"],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls.","dates":{"published":"2025-11-14T19:37:08.224Z","modified":"2026-05-11T11:26:36.924Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00575,"percentile":0.46351,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.03899999999999997,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00536},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00575,"percentile":0.46351}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00575,"percentile":0.46351}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-1286","name":"Improper Validation of Syntactic Correctness of Input","description":"The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1286.html"}],"affected":[{"vendor":"chainguard","product":"jitsucom-jitsu","name":"jitsucom-jitsu","label":"jitsucom-jitsu","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jitsucom-jitsu","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jitsucom-jitsu-console","name":"jitsucom-jitsu-console","label":"jitsucom-jitsu-console","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jitsucom-jitsu-console","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jitsucom-jitsu-rotor","name":"jitsucom-jitsu-rotor","label":"jitsucom-jitsu-rotor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jitsucom-jitsu-rotor","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"< 7.17.29-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.17.29-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18","name":"kibana-8.18","label":"kibana-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-bitnami","name":"kibana-8.18-bitnami","label":"kibana-8.18-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-bitnami","purlType":"apk","versions":[{"text":"< 8.18.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-iamguarded","name":"kibana-8.18-iamguarded","label":"kibana-8.18-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-iamguarded","purlType":"apk","versions":[{"text":"< 8.18.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat-compat","name":"librechat-compat","label":"librechat-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat-compat","purlType":"apk","versions":[{"text":"< 0.8.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat-dev","name":"librechat-dev","label":"librechat-dev","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat-dev","purlType":"apk","versions":[{"text":"< 0.8.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jitsucom-jitsu","name":"jitsucom-jitsu","label":"jitsucom-jitsu","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jitsucom-jitsu","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jitsucom-jitsu-console","name":"jitsucom-jitsu-console","label":"jitsucom-jitsu-console","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jitsucom-jitsu-console","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jitsucom-jitsu-rotor","name":"jitsucom-jitsu-rotor","label":"jitsucom-jitsu-rotor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jitsucom-jitsu-rotor","purlType":"apk","versions":[{"text":"< 2.11.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r4","eol":null,"hubHref":null},{"vendor":"debian","product":"node-nodemailer","name":"node-nodemailer","label":"node-nodemailer","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-nodemailer","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.10.0+~6.4.17-1+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 7.0.9+~7.0.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.10.0+~6.4.17-1+deb13u1 | < 7.0.9+~7.0.2-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-nodemailer","name":"node-nodemailer","label":"node-nodemailer","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-nodemailer","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"nodemailer","product":"nodemailer","name":"nodemailer","label":"nodemailer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.7","eol":null,"hubHref":"/vendor/nodemailer/nodemailer"},{"vendor":"Npm","product":"nodemailer","name":"nodemailer","label":"nodemailer","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/nodemailer","purlType":"npm","versions":[{"text":"< 7.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.7","eol":null,"hubHref":null}],"affectedCount":28,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:15979","label":"access.redhat.com/errata/RHSA-2026:15979","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3751","label":"access.redhat.com/errata/RHSA-2026:3751","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13033","label":"access.redhat.com/security/cve/CVE-2025-13033","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","REPORT","Advisory","WEB"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402179","label":"bugzilla.redhat.com/show_bug.cgi?id=2402179","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT","WEB"]},{"url":"https://github.com/nodemailer/nodemailer","label":"github.com/nodemailer/nodemailer","hostname":"github.com","tags":["REPORT","PACKAGE"]},{"url":"https://github.com/nodemailer/nodemailer/commit/1150d99fba77280df2cfb1885c43df23109a8626","label":"github.com/nodemailer/nodemailer/commit/1150d99fba77280df2cfb1885c43df23109a8626","hostname":"github.com","tags":["REPORT","FIX","WEB"]},{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-mm7p-fcc7-pg87","label":"github.com/nodemailer/nodemailer/security/advisories/GHSA-mm7p-fcc7-pg87","hostname":"github.com","tags":["REPORT","Advisory","WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-13033","label":"ubuntu.com/security/CVE-2025-13033","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13033","label":"www.cve.org/CVERecord?id=CVE-2025-13033","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-13033","label":"security-tracker.debian.org/tracker/CVE-2025-13033","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","label":"access.redhat.com/downloads/content/package-browser/","hostname":"access.redhat.com","tags":["WEB"]},{"url":"https://catalog.redhat.com/software/containers/","label":"catalog.redhat.com/software/containers/","hostname":"catalog.redhat.com","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13033.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13033.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13033","label":"nvd.nist.gov/vuln/detail/CVE-2025-13033","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-28FP-Q5JJ-4HF3"]},"timeline":[{"kind":"published","date":"2025-11-14T19:37:08.224Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-11T11:26:36.924Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:45:23.189Z","stale":false,"partial":false}}