CVE-2026-110869 | Nodemailer up to 10.0.12 Auth Mechanism Detection SMTPConnection._actionEHLO redos

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in Nodemailer up to 10.0.12. Affected by this issue is the function SMTPConnection._actionEHLO of the component Auth Mechanism Detection. The manipulation leads to inefficient regular expression complexity.

This vulnerability is listed as CVE-2026-110869. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More