EUVD-2026-68441

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

CVE-2009-1602

CVE-2009-1602 affects Quick 'n Easy Mail Server 3.3. It enables a remote denial-of-service through processing of multiple long SMTP commands (demonstrated via HELO). The reported impact is daemon outage or CPU consumption, with CVSS base metrics indicating a Network attack vector, low complexity,...