Cpe:2.3:a:nodemailer:nodemailer:10.0.4:*:*:*:*:*:*:*

Nodemailer versions 9.1.0 through 10.0.4 are vulnerable to a denial of service attack where malicious email headers trigger quadratic time complexity in the addressparser component, exhausting CPU resources.