nodemailer
- Software type
- Other
- Total vulnerabilities (90 days)
- 20
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/15/2026, nodemailer recorded 20 security vulnerabilities in the last 90 days, of which 12 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of nodemailer and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-100702Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient ArraysCVE-2026-100701Nodemailer 5.0.0 through 10.0.1 TLS servername Cache ConfusionCVE-2026-100700nodemailer before 10.0.6 Denial of Service via addressparserCVE-2026-100699Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 CommentCVE-2026-92598Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass20 Results | Page 1 of 2