Skip to main content

Improper Check or Handling of Exceptional Conditions

CVE-2025-14874

High
7.5/10

Summary

A flaw was found in Nodemailer versions through 7.0.10. This vulnerability allows a Denial-of-Service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-703 - Improper Check or Handling of Exceptional Conditions

The software does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the software.

References

Advisory Timeline

  • Published