CVE ID :CVE-2026-110872 Published : Oct. 14, 2026, 11:17 p.m. | 4ย hours, 55ย minutes ago Description :Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line be
Vulnerability
CVE-2026-110872
MITRE CVE High
Refer to CVE-2026-110872 NVD advisory