Medium severity5.3NVD Advisory· Published Aug 31, 2026· Updated Sep 10, 2026
CVE-2024-58379
CVE-2024-58379
Description
nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop to hang and deny service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <6.9.9
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.