Lucene search
+L

146 matches found

Github Security Blog
Github Security Blog
•added 2026/09/28 9:56 p.m.•12 views

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure

Summary Nodemailer's process-global DNS cache is keyed only by host, but each cache entry also stores the caller-specific TLS servername. When two direct SMTPS transports use the same DNS host with different tls.servername values, the first transport's server name is returned to the second...

6AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder