CVE-2024-58379

Published: Ago 31, 2026 Last Modified: Ago 31, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,9
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low

Description

AI Translation Available

nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop to hang and deny service.

1333

Inefficient Regular Expression Complexity

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Resource Consumption (Cpu)
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: High
View CWE Details
https://github.com/nodemailer/nodemailer/security/advisorie…
https://github.com/nodemailer/nodemailer/security/advisories/GHSA-9h6g-pr28-7cqp
https://www.vulncheck.com/advisories/nodemailer-before-6.9.…
https://www.vulncheck.com/advisories/nodemailer-before-6.9.9-redos-via-attachda…