CVE-2025-14874

Published December 18th, 2025

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.

nodemailer/nodemailer

✉️ Send e-mails with Node.JS – easy as cake!

GitHub

17.6K