CVE-2025-14874 — Nodemailer: nodemailer: denial of service via crafted email address header
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Published: 2025-12-18 · CVSS: 7.5 · CVSS 3.1
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7