{"id":"CVE-2025-14874","revision":"79d5a1580a5d4b20a48a1f47b0bfd8f1","records":[{"revision":"79d5a1580a5d4b20a48a1f47b0bfd8f1","observedAt":"2026-10-27T06:22:56.019+00:00","statement":{"source":"cve-program","id":"CVE-2025-14874","aliases":[],"title":"Nodemailer: nodemailer: denial of service via crafted email address header","description":"A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.","state":0,"publishedAt":"2025-12-18T08:40:31.916+00:00","modifiedAt":"2026-10-27T04:36:27.387+00:00","affected":[{"ecosystem":"https://github.com/nodemailer/nodemailer","name":"nodemailer","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"nodemailer\",\n                    \"product\": \"nodemailer\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.0.11\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageName\": \"nodemailer\",\n                    \"collectionURL\": \"https://github.com/nodemailer/nodemailer\",\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhacm2/acm-grafana-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"rhacm2/acm-grafana-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:acm:2\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhceph/grafana-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Ceph Storage 8\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"rhceph/grafana-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:ceph_storage:8\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhdh/rhdh-hub-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Developer Hub 1\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"rhdh/rhdh-hub-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:rhdh:1\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://access.redhat.com/security/cve/CVE-2025-14874","https://bugzilla.redhat.com/show_bug.cgi?id=2418133","https://github.com/nodemailer/nodemailer","https://github.com/nodemailer/nodemailer/commit/b61b9c0cfd682b6f647754ca338373b68336a150","https://github.com/nodemailer/nodemailer/security/advisories/GHSA-rcmh-qjqh-p98v"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-14874","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-14874","identifiers":["CVE-2025-14874"]},"retained":false,"historicalAffected":[]}],"coverage":[]}