{
  "@id": "urn:uuid:95274db7-4ee4-40e1-98cf-ad1992d37a30",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 22,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T20:31:58.444864+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2020-7769 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2020-7769"
      },
      "action_statement": "Vulnerability CVE-2020-7769 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2021-23400 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2021-23400"
      },
      "action_statement": "Vulnerability CVE-2021-23400 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2025-13033 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2025-13033"
      },
      "action_statement": "Vulnerability CVE-2025-13033 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2025-14874 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2025-14874"
      },
      "action_statement": "Vulnerability CVE-2025-14874 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-19T17:02:00.141161+00:00",
      "status_notes": "Vulnerability CVE-2026-100701 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-100701"
      },
      "action_statement": "Vulnerability CVE-2026-100701 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-15T15:49:00.133726+00:00",
      "status_notes": "Vulnerability CVE-2026-110869 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-110869"
      },
      "action_statement": "Vulnerability CVE-2026-110869 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-26T15:35:33.946658+00:00",
      "status_notes": "Vulnerability CVE-2026-110870 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-110870"
      },
      "action_statement": "Vulnerability CVE-2026-110870 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-20T17:42:07.104023+00:00",
      "status_notes": "Vulnerability CVE-2026-110871 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-110871"
      },
      "action_statement": "Vulnerability CVE-2026-110871 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T12:04:00.097259+00:00",
      "status_notes": "Vulnerability CVE-2026-110872 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-110872"
      },
      "action_statement": "Vulnerability CVE-2026-110872 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2026-82659 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82659"
      },
      "action_statement": "Vulnerability CVE-2026-82659 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2026-82662 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82662"
      },
      "action_statement": "Vulnerability CVE-2026-82662 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T20:31:58.444864+00:00",
      "status_notes": "Vulnerability CVE-2026-82854 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82854"
      },
      "action_statement": "Vulnerability CVE-2026-82854 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2026-90776 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-90776"
      },
      "action_statement": "Vulnerability CVE-2026-90776 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-09T02:01:54.726674+00:00",
      "status_notes": "Vulnerability CVE-2026-92595 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92595"
      },
      "action_statement": "Vulnerability CVE-2026-92595 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-09T02:01:54.726674+00:00",
      "status_notes": "Vulnerability CVE-2026-92596 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92596"
      },
      "action_statement": "Vulnerability CVE-2026-92596 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-09T02:01:54.726674+00:00",
      "status_notes": "Vulnerability CVE-2026-92597 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92597"
      },
      "action_statement": "Vulnerability CVE-2026-92597 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-09T02:01:54.726674+00:00",
      "status_notes": "Vulnerability CVE-2026-92598 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92598"
      },
      "action_statement": "Vulnerability CVE-2026-92598 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-268h-hp4c-crq3 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-268h-hp4c-crq3"
      },
      "action_statement": "Vulnerability GHSA-268h-hp4c-crq3 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-2x7j-588g-ccc2 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-2x7j-588g-ccc2"
      },
      "action_statement": "Vulnerability GHSA-2x7j-588g-ccc2 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-46j5-6fg5-4gv3 is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-46j5-6fg5-4gv3"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T15:13:32.414812+00:00",
      "status_notes": "Vulnerability GHSA-4ffr-jq9g-5ffx affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-4ffr-jq9g-5ffx"
      },
      "action_statement": "Vulnerability GHSA-4ffr-jq9g-5ffx affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T15:13:32.414812+00:00",
      "status_notes": "Vulnerability GHSA-4g23-2xm8-66gc affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-4g23-2xm8-66gc"
      },
      "action_statement": "Vulnerability GHSA-4g23-2xm8-66gc affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-15T12:59:26.638264+00:00",
      "status_notes": "Vulnerability GHSA-6vj9-mwq6-2f5v affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-6vj9-mwq6-2f5v"
      },
      "action_statement": "Vulnerability GHSA-6vj9-mwq6-2f5v affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T12:04:00.097259+00:00",
      "status_notes": "Vulnerability GHSA-85x2-q946-cp5h affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5.",
      "vulnerability": {
        "name": "GHSA-85x2-q946-cp5h"
      },
      "action_statement": "Vulnerability GHSA-85x2-q946-cp5h affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T12:04:00.097259+00:00",
      "status_notes": "Vulnerability GHSA-8c8m-p3m8-cjg8 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5.",
      "vulnerability": {
        "name": "GHSA-8c8m-p3m8-cjg8"
      },
      "action_statement": "Vulnerability GHSA-8c8m-p3m8-cjg8 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-8m3c-c648-2xjj affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-8m3c-c648-2xjj"
      },
      "action_statement": "Vulnerability GHSA-8m3c-c648-2xjj affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-12T23:13:00.090427+00:00",
      "status_notes": "Vulnerability GHSA-8vvx-rff5-p5rq affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.2.",
      "vulnerability": {
        "name": "GHSA-8vvx-rff5-p5rq"
      },
      "action_statement": "Vulnerability GHSA-8vvx-rff5-p5rq affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-9h6g-pr28-7cqp affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-9h6g-pr28-7cqp"
      },
      "action_statement": "Vulnerability GHSA-9h6g-pr28-7cqp affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-c7w3-x93f-qmm8 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-c7w3-x93f-qmm8"
      },
      "action_statement": "Vulnerability GHSA-c7w3-x93f-qmm8 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-cc9r-2j5m-2m83 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-cc9r-2j5m-2m83"
      },
      "action_statement": "Vulnerability GHSA-cc9r-2j5m-2m83 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-frj6-5rhh-vwfw is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-frj6-5rhh-vwfw"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-g57g-f23g-4646 affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-g57g-f23g-4646"
      },
      "action_statement": "Vulnerability GHSA-g57g-f23g-4646 affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:25:50.594919+00:00",
      "status_notes": "Vulnerability GHSA-g73g-hqqh-jr95 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.6.",
      "vulnerability": {
        "name": "GHSA-g73g-hqqh-jr95"
      },
      "action_statement": "Vulnerability GHSA-g73g-hqqh-jr95 affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.6."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-h3hj-cmcx-xc66 is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-h3hj-cmcx-xc66"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-jj37-3377-m6vv is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-jj37-3377-m6vv"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-27T12:04:00.097259+00:00",
      "status_notes": "Vulnerability GHSA-m943-m63m-w62w affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5.",
      "vulnerability": {
        "name": "GHSA-m943-m63m-w62w"
      },
      "action_statement": "Vulnerability GHSA-m943-m63m-w62w affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-12T23:13:00.090427+00:00",
      "status_notes": "Vulnerability GHSA-v53p-9fqp-m79j affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.2.",
      "vulnerability": {
        "name": "GHSA-v53p-9fqp-m79j"
      },
      "action_statement": "Vulnerability GHSA-v53p-9fqp-m79j affects version 9.0.1 of nodemailer, and is fixed in 9.0.1-tuxcare.2."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-vm5r-23w9-m8hx is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-vm5r-23w9-m8hx"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-vvjj-xcjg-gr5g affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-vvjj-xcjg-gr5g"
      },
      "action_statement": "Vulnerability GHSA-vvjj-xcjg-gr5g affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-wmmp-3585-3rmp affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-wmmp-3585-3rmp"
      },
      "action_statement": "Vulnerability GHSA-wmmp-3585-3rmp affects version 9.0.1 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-wqvq-jvpq-h66f affects version 9.0.1 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-wqvq-jvpq-h66f"
      },
      "action_statement": "Vulnerability GHSA-wqvq-jvpq-h66f affects version 9.0.1 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.0.1",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.0.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:05:00.556684+00:00",
      "status_notes": "Vulnerability GHSA-wxxx-r42m-9rp8 is a false positive for nodemailer 9.0.1.",
      "vulnerability": {
        "name": "GHSA-wxxx-r42m-9rp8"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}