https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T20:34:50.693171+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-92596 CVE-2026-92596 — Nodemailer before 9.1.0 Denial of Service via addressparser 2026-10-01T20:34:50.696388+00:00

Affected: nodemailer

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a crafted comma-separated address list. Attackers can send a single email with a large number of addresses to block the Node.js event loop for extended periods, consuming 100% CPU and freezing the process.