← Back

CVE-2025-14874

nvd nist
Published: Dec 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD (Secondary)

Description

A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.

Affected (4)

Nodemailer
1 product
Nodemailer
Redhat
3 products
Advanced Cluster Management For Kubernetes
Ceph Storage
Developer Hub
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Nodemailer
Before 7.0.11
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Advanced Cluster Management For Kubernetes
Version 2.0
Ceph Storage
Version 8.0
Developer Hub
All versions

Related CWEs

CWE-703
Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

References (7)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
ExploitIssue TrackingThird Party Advisory
Source: secalert@redhat.com
Product
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
ExploitVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitVendor Advisory

Timeline

No history available yet.