← Database

CVE-2025-14874

HIGH CVSS: 7.5 Published: 2025-12-18 Modified: 2026-06-17

Description

A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.

Affected Platforms

Redhat Ceph StorageNodemailer NodemailerRedhat Developer HubRedhat Advanced Cluster Management For Kubernetes

Weakness Type

CWE-703

References