CVE-2020-7769

CVE-2020-7769 is a critical vulnerability affecting versions of the nodemailer package prior to 6.4.16. It allows an attacker to inject arbitrary command flags into the sendmail transport by crafting malicious recipient email addresses. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network without user interaction and can lead to complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the high severity warrants immediate patching.