{
  "@id": "urn:uuid:1c19d0da-fc0e-43c6-b86f-9167c112371e",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 25,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T20:31:58.444864+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2020-7769 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2020-7769"
      },
      "action_statement": "Vulnerability CVE-2020-7769 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2021-23400 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2021-23400"
      },
      "action_statement": "Vulnerability CVE-2021-23400 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2025-13033 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2025-13033"
      },
      "action_statement": "Vulnerability CVE-2025-13033 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2025-14874 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2025-14874"
      },
      "action_statement": "Vulnerability CVE-2025-14874 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T11:11:44.028700+00:00",
      "status_notes": "Vulnerability CVE-2026-100699 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-100699"
      },
      "action_statement": "Vulnerability CVE-2026-100699 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T13:26:37.692920+00:00",
      "status_notes": "Vulnerability CVE-2026-100700 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-100700"
      },
      "action_statement": "Vulnerability CVE-2026-100700 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-09-29T21:49:02.334395+00:00",
      "status_notes": "Vulnerability CVE-2026-100702 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-100702"
      },
      "action_statement": "Vulnerability CVE-2026-100702 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-20T05:15:06.966747+00:00",
      "status_notes": "Vulnerability CVE-2026-110869 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-110869"
      },
      "action_statement": "Vulnerability CVE-2026-110869 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-28T09:48:17.847708+00:00",
      "status_notes": "Vulnerability CVE-2026-110870 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.8.",
      "vulnerability": {
        "name": "CVE-2026-110870"
      },
      "action_statement": "Vulnerability CVE-2026-110870 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.8."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-20T05:15:06.966747+00:00",
      "status_notes": "Vulnerability CVE-2026-110871 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-110871"
      },
      "action_statement": "Vulnerability CVE-2026-110871 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-20T05:15:06.966747+00:00",
      "status_notes": "Vulnerability CVE-2026-110872 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-110872"
      },
      "action_statement": "Vulnerability CVE-2026-110872 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2026-82659 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82659"
      },
      "action_statement": "Vulnerability CVE-2026-82659 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2026-82662 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82662"
      },
      "action_statement": "Vulnerability CVE-2026-82662 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T20:31:58.444864+00:00",
      "status_notes": "Vulnerability CVE-2026-82854 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "CVE-2026-82854"
      },
      "action_statement": "Vulnerability CVE-2026-82854 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T11:11:44.028700+00:00",
      "status_notes": "Vulnerability CVE-2026-90776 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-90776"
      },
      "action_statement": "Vulnerability CVE-2026-90776 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-268h-hp4c-crq3 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-268h-hp4c-crq3"
      },
      "action_statement": "Vulnerability GHSA-268h-hp4c-crq3 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-2x7j-588g-ccc2 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-2x7j-588g-ccc2"
      },
      "action_statement": "Vulnerability GHSA-2x7j-588g-ccc2 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-46j5-6fg5-4gv3 is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-46j5-6fg5-4gv3"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-27T15:13:32.414812+00:00",
      "status_notes": "Vulnerability GHSA-4ffr-jq9g-5ffx affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-4ffr-jq9g-5ffx"
      },
      "action_statement": "Vulnerability GHSA-4ffr-jq9g-5ffx affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-27T15:13:32.414812+00:00",
      "status_notes": "Vulnerability GHSA-4g23-2xm8-66gc affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-4g23-2xm8-66gc"
      },
      "action_statement": "Vulnerability GHSA-4g23-2xm8-66gc affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-09-29T09:02:14.420070+00:00",
      "status_notes": "Vulnerability GHSA-6vj9-mwq6-2f5v affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.2.",
      "vulnerability": {
        "name": "GHSA-6vj9-mwq6-2f5v"
      },
      "action_statement": "Vulnerability GHSA-6vj9-mwq6-2f5v affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-27T11:57:00.035223+00:00",
      "status_notes": "Vulnerability GHSA-85x2-q946-cp5h affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7.",
      "vulnerability": {
        "name": "GHSA-85x2-q946-cp5h"
      },
      "action_statement": "Vulnerability GHSA-85x2-q946-cp5h affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-27T11:57:00.035223+00:00",
      "status_notes": "Vulnerability GHSA-8c8m-p3m8-cjg8 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7.",
      "vulnerability": {
        "name": "GHSA-8c8m-p3m8-cjg8"
      },
      "action_statement": "Vulnerability GHSA-8c8m-p3m8-cjg8 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-8m3c-c648-2xjj affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.1.",
      "vulnerability": {
        "name": "GHSA-8m3c-c648-2xjj"
      },
      "action_statement": "Vulnerability GHSA-8m3c-c648-2xjj affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-09-29T21:49:02.334395+00:00",
      "status_notes": "Vulnerability GHSA-8vvx-rff5-p5rq affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.3.",
      "vulnerability": {
        "name": "GHSA-8vvx-rff5-p5rq"
      },
      "action_statement": "Vulnerability GHSA-8vvx-rff5-p5rq affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-9h6g-pr28-7cqp affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-9h6g-pr28-7cqp"
      },
      "action_statement": "Vulnerability GHSA-9h6g-pr28-7cqp affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-c7w3-x93f-qmm8 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-c7w3-x93f-qmm8"
      },
      "action_statement": "Vulnerability GHSA-c7w3-x93f-qmm8 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-cc9r-2j5m-2m83 affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-cc9r-2j5m-2m83"
      },
      "action_statement": "Vulnerability GHSA-cc9r-2j5m-2m83 affects version 9.1.0 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-frj6-5rhh-vwfw is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-frj6-5rhh-vwfw"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T11:11:44.028700+00:00",
      "status_notes": "Vulnerability GHSA-g57g-f23g-4646 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4.",
      "vulnerability": {
        "name": "GHSA-g57g-f23g-4646"
      },
      "action_statement": "Vulnerability GHSA-g57g-f23g-4646 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-28T09:48:17.847708+00:00",
      "status_notes": "Vulnerability GHSA-g73g-hqqh-jr95 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.8.",
      "vulnerability": {
        "name": "GHSA-g73g-hqqh-jr95"
      },
      "action_statement": "Vulnerability GHSA-g73g-hqqh-jr95 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.8."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-h3hj-cmcx-xc66 is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-h3hj-cmcx-xc66"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-jj37-3377-m6vv is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-jj37-3377-m6vv"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-27T11:57:00.035223+00:00",
      "status_notes": "Vulnerability GHSA-m943-m63m-w62w affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7.",
      "vulnerability": {
        "name": "GHSA-m943-m63m-w62w"
      },
      "action_statement": "Vulnerability GHSA-m943-m63m-w62w affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.7."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T11:11:44.028700+00:00",
      "status_notes": "Vulnerability GHSA-prgh-xp8r-p3m5 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4.",
      "vulnerability": {
        "name": "GHSA-prgh-xp8r-p3m5"
      },
      "action_statement": "Vulnerability GHSA-prgh-xp8r-p3m5 affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-01T13:26:37.692920+00:00",
      "status_notes": "Vulnerability GHSA-v53p-9fqp-m79j affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.5.",
      "vulnerability": {
        "name": "GHSA-v53p-9fqp-m79j"
      },
      "action_statement": "Vulnerability GHSA-v53p-9fqp-m79j affects version 9.1.0 of nodemailer, and is fixed in 9.1.0-tuxcare.5."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-vm5r-23w9-m8hx is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-vm5r-23w9-m8hx"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-vvjj-xcjg-gr5g affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-vvjj-xcjg-gr5g"
      },
      "action_statement": "Vulnerability GHSA-vvjj-xcjg-gr5g affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-wmmp-3585-3rmp affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-wmmp-3585-3rmp"
      },
      "action_statement": "Vulnerability GHSA-wmmp-3585-3rmp affects version 9.1.0 of nodemailer."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability GHSA-wqvq-jvpq-h66f affects version 9.1.0 of nodemailer.",
      "vulnerability": {
        "name": "GHSA-wqvq-jvpq-h66f"
      },
      "action_statement": "Vulnerability GHSA-wqvq-jvpq-h66f affects version 9.1.0 of nodemailer."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/nodemailer@9.1.0",
          "identifiers": {
            "purl": "pkg:npm/nodemailer@9.1.0"
          }
        }
      ],
      "timestamp": "2026-10-22T17:05:00.556684+00:00",
      "status_notes": "Vulnerability GHSA-wxxx-r42m-9rp8 is a false positive for nodemailer 9.1.0.",
      "vulnerability": {
        "name": "GHSA-wxxx-r42m-9rp8"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}