Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Francoatmega

#41907of 56,327
6.9Total CVSS
Vulnerabilities · 1
PT-2026-83722
6.9
2024-01-31
Npm · Nodemailer · CVE-2024-58379
**Name of the Vulnerable Software and Affected Versions** nodemailer versions prior to 6.9.9 **Description** A Regular Expression Denial of Service (ReDoS) occurs during email parsing when the `attachDataUrls` parameter is enabled or when processing embedded file attachments. An attacker can send specially crafted emails containing malicious data URLs or embedded attachments to cause the event loop to hang, resulting in a denial of service. The issue is triggered within the ` processDataUrl()` and ` convertDataImages()` functions during the compilation and attachment processing stages. **Recommendations** Update to version 6.9.9 or later.