A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email
    address header that triggers infinite recursion in the address parser. (CVE-2025-14874)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email     address header that triggers infinite recursion in the address parser. (CVE-2025-14874)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
457059	Echo: nodemailer: security update to 7.0.11	Tenable Cloud Security	Echo Local Security Checks	Local	high
457059	Echo: nodemailer: security update to 7.0.11	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
437227	SCA: security update for nodemailer (GHSA-rcmh-qjqh-p98v)	Tenable Cloud Security	SCA Checks	Local	high
437227	SCA: security update for nodemailer (GHSA-rcmh-qjqh-p98v)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
279271	Linux Distros Unpatched Vulnerability : CVE-2025-14874	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-14874

high

Tenable Plugins

high

high

high

high

medium