Threats tagged 'ghsa-c7vw-frhj-6h9j'

Nodemailer versions before 10.0.6 contain a denial of service vulnerability caused by a regex pattern in the addressparser free-text fallback. This vulnerability results in quadratic backtracking when processing crafted email header values with long whitespace-free runs, which can block the Node.js event loop and cause service unavailability.