GHSA-2x7j-588g-ccc2

High

GHSA-2x7j-588g-ccc2

Published Sep 8, 2026

CVSS

7.5

HIGH

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.

—

Affected packages

Summary

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

Developer impact

Recommended action

Affected packages

Sources