Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:nodemailer:nodemailer:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

CVE-2026-100700 Denial of Service in Nodemailer

Nodemailer versions before 10.0.6 are vulnerable to a Regular Expression Denial of Service (ReDoS) in the addressparser component, allowing attackers to block the Node.js event loop via crafted email headers.

nodemailer
1t 1c
high advisory

Nodemailer SSRF and Arbitrary File Read Vulnerability

Nodemailer versions before 9.0.1 fail to enforce security flags when processing message-level raw options, allowing authenticated attackers to perform SSRF and read arbitrary files.

nodemailer +1 vulnerability ssrf file-access smtp-injection
3t 1c