Denial Of Service (DoS)

🗓️ 26 Feb 2026 06:02:09Reported by Veracode Vulnerability DatabaseType

Nodemailer DoS via crafted header causing infinite recursion and resource exhaustion.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics	11 Feb 202620:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.17.0 shipped with IBM Cloud Pak for Business Automation iFixes for April 2026	27 May 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service (CVE-2025-12758, CVE-2025-13466, CVE-2025-14874) and loss of confidentiality (CVE-2025-65945)	5 Feb 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services before 4.6.20 shipped with IBM Cloud Pak for Business Automation iFixes for January 2026.	17 Mar 202617:38	–	ibm
Chainguard	CVE-2025-14874 vulnerabilities	4 Feb 202619:17	–	cgr
Circl	CVE-2025-14874	1 Dec 202520:44	–	circl
CNNVD	Nodemailer 安全漏洞	18 Dec 202500:00	–	cnnvd
CVE	CVE-2025-14874	18 Dec 202508:40	–	cve
Cvelist	CVE-2025-14874 Nodemailer: nodemailer: denial of service via crafted email address header	18 Dec 202508:40	–	cvelist

Vulners

Node

nodemailer nodemailerRange2.4.2–6.10.1js

nodemailer nodemailerRange0.1.1–7.0.10js

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-14874
github	www.github.com/nodemailer/nodemailer/commit/b61b9c0cfd682b6f647754ca338373b68336a150
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-rcmh-qjqh-p98v

30 May 2026 05:51Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00219

SSVC