StackRadar

CVE-2025-14874

High

Advisory

Published 1 Dec 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
120
of 17,781 indexed, latest versions
Container images
113
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 113 images.

Affected packageAffected versionsFixed inImages
nodemailernpm4.0.1, 4.6.8, 4.7.0, 5.0.0+34 more7.0.11113
OSV records
GHSA-rcmh-qjqh-p98v

Charts affected

120 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
nodemailer@6.6.5
7.0.11

Open the chart page →

4,744
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
nodemailer@7.0.10
7.0.11

Open the chart page →

4,684
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
nodemailer@6.9.1
7.0.11

Open the chart page →

4,431
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
nodemailer@6.4.6
7.0.11

Open the chart page →

3,638
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
nodemailer@6.9.16
7.0.11

Open the chart page →

1,991
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
nodemailer@6.9.9
7.0.11

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
nodemailer@6.9.9
7.0.11

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
nodemailer@6.7.5
7.0.11

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
nodemailer@6.9.9
7.0.11

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
nodemailer@6.9.9
7.0.11

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
nodemailer@6.9.9
7.0.11

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
nodemailer@6.9.9
7.0.11

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
nodemailer@6.9.9
7.0.11

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
nodemailer@6.9.9
7.0.11

Open the chart page →

11,100
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
7.0.11

Open the chart page →

4,017
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
nodemailer@6.10.1
7.0.11

Open the chart page →

5,535
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
nodemailer@6.10.0
7.0.11

Open the chart page →

5,228
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
7.0.11

Open the chart page →

3,129
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
nodemailer@6.9.1
7.0.11

Open the chart page →

5,459
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-14874.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
nodemailer@6.9.15
7.0.11

Open the chart page →

6,285

Container images carrying it

113 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:1.18.5a84767d7934f
nodemailer@6.6.5
7.0.11
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
nodemailer@6.9.13
7.0.11
1
maildev/maildev:2.2.1180ef51f65ee
nodemailer@6.9.14
7.0.11
1
misskey/misskey:12.110.1e08b7c478093
nodemailer@6.7.3
7.0.11
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
nodemailer@6.9.8
7.0.11
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nodemailer@6.9.7
7.0.11
1
n8nio/n8n:1.86.08b39ed5a2de9
nodemailer@6.9.9
7.0.11
1
n8nio/n8n:0.212.0a9195bc499a3
nodemailer@6.8.0
7.0.11
1
n8nio/n8n:1.33.1dd171d45102a
nodemailer@6.9.9
7.0.11
1
nocodb/nocodb:0.258.06779a4ddedf2
nodemailer@6.9.16
7.0.11
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
nodemailer@6.7.2
7.0.11
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
nodemailer@6.4.18
7.0.11
1
outlinewiki/outline:0.82.0494dfb9249a6
nodemailer@6.10.0
7.0.11
1
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
7.0.11
1
requarks/wiki:canary-2.5.2438b5865a7386c
nodemailer@6.4.14
7.0.11
1
shinobisystems/shinobi:dev3ca746937856
nodemailer@6.6.1
7.0.11
1
shinobisystems/shinobi:latestc2f5ce2e1067
nodemailer@6.6.1
7.0.11
1
solidproject/community-server:6.0.2ccc4acb7e9a1
nodemailer@6.9.1
7.0.11
1
soulteary/cronicle:0.9.80ac2512fa6e39
nodemailer@6.10.0
7.0.11
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
nodemailer@6.7.5
7.0.11
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.26.379f14a2bf931
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
nodemailer@6.9.9
7.0.11
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
nodemailer@6.9.9
7.0.11
1
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
7.0.11
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
nodemailer@6.7.2
7.0.11
1
zooz/predator:1.6f491d1f7a865
nodemailer@6.7.3
7.0.11
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
nodemailer@6.9.13
7.0.11
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
nodemailer@6.10.1
7.0.11
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
nodemailer@6.10.1
7.0.11
1
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
nodemailer@6.10.1
7.0.11
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nodemailer@4.6.8
7.0.11
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nodemailer@6.1.1
7.0.11
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nodemailer@6.1.1
7.0.11
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nodemailer@6.1.1
7.0.11
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
nodemailer@6.9.15
7.0.11
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
nodemailer@6.9.15
7.0.11
1
ghcr.io/data-fair/portals:18b621866ceb2
nodemailer@6.10.1
7.0.11
1
ghcr.io/data-fair/processings:15a9216989707
nodemailer@6.9.7
7.0.11
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
nodemailer@5.0.0
7.0.11
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
nodemailer@6.9.16
7.0.11
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
nodemailer@7.0.10
7.0.11
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
nodemailer@7.0.4
7.0.11
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
nodemailer@7.0.4
7.0.11
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
nodemailer@6.4.14
7.0.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.