nodemailer

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-23400unspecified – < 6.6.1HTTP Header InjectionHIGH 8.81.4 %
CVE-2020-7769unspecified – < 6.4.16Command InjectionCRITICAL 9.82.3 %