CVE-2026-82659: Nodemailer Raw Missing Sandbox Flagscve-2026-82659-nodemailer-raw-missing-sandbox-flags
MimeNode is initialized with raw content without specifying disableFileAccess or disableUrlAccess security options. This can allow arbitrary file inclusion or SSRF (CVE-2026-82659) if untrusted input reaches the raw message option.