CVE-2026-110872 | Nodemailer up to 10.0.9 SMTP client reply parser SMTPConnection._onData/isPartialResponse denial of service

October 15, 2026 Yanac

A vulnerability described as problematic has been identified in Nodemailer up to 10.0.9. This issue affects the function SMTPConnection._onData/isPartialResponse of the component SMTP client reply parser. Such manipulation leads to denial of service.

This vulnerability is documented as CVE-2026-110872. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More