Root has patched AIKIDO-2026-10941 in the nodemailer package for Root:npm. Multiple fixed versions available.
{
"distro": "npm",
"distro_version": "",
"severity": "MEDIUM",
"source": "Root"
}[
"6.10.1-aikido.10",
"6.10.1-aikido.11",
"6.10.1-aikido.12",
"6.10.1-aikido.9",
"6.10.1-aikido.8",
"6.10.1-aikido.6"
]
"aikido.12"
true
"https://api.root.io/external/osv/ROOT-APP-NPM-AIKIDO-2026-10941.json"
6
"6.10.1"
[
"6.10.1-root.io.10",
"6.10.1-root.io.11",
"6.10.1-root.io.12",
"6.10.1-root.io.9",
"6.10.1-root.io.8",
"6.10.1-root.io.6"
]
"root.io.12"
true
"https://api.root.io/external/osv/ROOT-APP-NPM-AIKIDO-2026-10941.json"
6
"6.10.1"