CVE-2026-38728
An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components
- Update to 3.18.3
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for smtp-server in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components
Check your installed stack and versions against the current vulnerability feeds.