PT-2025-39071 · Mailgen · Mailgen

Published 2025-09-21 · Updated 2025-09-23 · CVE-2025-59526

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions mailgen versions prior to 2.0.30

Description mailgen is a Node.js package used to generate responsive HTML e-mails. A HTML injection flaw exists in plaintext e-mails generated by the software when using the Mailgen.generatePlaintext(email) method with user-provided content. The issue allows for potential injection of HTML code into generated e-mails. A workaround involves removing all HTML tags from content before using it with the Mailgen.generatePlaintext(email) function.

Recommendations Update to version 2.0.30 or later. Strip all HTML tags from content before passing it to the Mailgen.generatePlaintext(email) function.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-16482

CVE-2025-59526

GHSA-J2XJ-H7W5-R7VP

Affected Products

Mailgen

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59526.json · Exploit
• https://bdu.fstec.ru/vul/2025-16482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-59526 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59526 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j2xj-h7w5-r7vp · Vendor Advisory
• https://github.com/eladnava/mailgen/security/advisories/GHSA-j2xj-h7w5-r7vp · Note
• https://github.com/eladnava/mailgen/commit/741a0190ddae0f408b22ae3b5f0f4c3f5cf4f11d · Note
• https://github.com/eladnava/mailgen · Note
• https://github.com/advisories/GHSA-j2xj-h7w5-r7vp · Note
• https://twitter.com/CVEnew/status/1970255643211899165 · Twitter Post
• https://t.me/CVEtracker/33089 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1970296152915423512 · Twitter Post