CVE-2026-100700
HighAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 206
- of 17,957 indexed, latest versions
- Container images
- 192
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service
Carried by container images the latest versions of 206 of 17,957 indexed charts deploy, on 192 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nodemailernpm | 1.11.0, 2.7.2, 4.0.1, 4.6.8+54 more | 10.0.6 | 192 |
- OSV records
- GHSA-v53p-9fqp-m79j
Charts affected
206 by stars
Container images carrying it
192 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| fonoster/ | e27001f2813c | nodemailer | 10.0.6 | 1 |
| fosrl/ | c32ad797ab96 | nodemailer | 10.0.6 | 1 |
| getwud/ | b1cd01c43839 | nodemailer | 10.0.6 | 1 |
| growthbook/ | cbf1bc59e9a9 | nodemailer | 10.0.6 | 1 |
| helmforge/ | 70e9143d6d92 | nodemailer | 10.0.6 | 1 |
| hoppscotch/ | 538fe6ded4b6 | nodemailer | 10.0.6 | 1 |
| hoppscotch/ | e7ba6061a286 | nodemailer | 10.0.6 | 1 |
| ibmcom/ | ed5505e5c7ec | nodemailer | 10.0.6 | 1 |
| infisical/ | 02082bf13163 | nodemailer | 10.0.6 | 1 |
| infisical/ | 3365445909be | nodemailer | 10.0.6 | 1 |
| jayfong/ | 163e5d621910 | nodemailer | 10.0.6 | 1 |
| joplin/ | 52af57880c0e | nodemailer | 10.0.6 | 1 |
| library/ | 1ef2e532ca4d | nodemailer | 10.0.6 | 1 |
| library/ | 2654b1e90413 | nodemailer | 10.0.6 | 1 |
| library/ | 29773d6be407 | nodemailer | 10.0.6 | 1 |
| library/ | 586821cfebac | nodemailer | 10.0.6 | 1 |
| library/ | 767230c0f263 | nodemailer | 10.0.6 | 1 |
| library/ | 77196da4b0df | nodemailer | 10.0.6 | 1 |
| library/ | 83f7bf209844 | nodemailer | 10.0.6 | 1 |
| library/ | fea3264f902e | nodemailer | 10.0.6 | 1 |
| library/ | 0172f1c538e7 | nodemailer | 10.0.6 | 1 |
| library/ | 35544f1ff28a | nodemailer | 10.0.6 | 1 |
| library/ | b1bbcaa57738 | nodemailer | 10.0.6 | 1 |
| library/ | c5781ba340ef | nodemailer | 10.0.6 | 1 |
| library/ | e2e2031c15be | nodemailer | 10.0.6 | 1 |
| linuxserver/ | 6108ed066d4a | nodemailer | 10.0.6 | 1 |
| louislam/ | 059b49d64739 | nodemailer | 10.0.6 | 1 |
| louislam/ | 0b55bcb83a1c | nodemailer | 10.0.6 | 1 |
| louislam/ | 4c364ef96aad | nodemailer | 10.0.6 | 1 |
| louislam/ | 70233f4acb51 | nodemailer | 10.0.6 | 1 |
| louislam/ | 91e963bfda56 | nodemailer | 10.0.6 | 1 |
| louislam/ | 9865163f92c1 | nodemailer | 10.0.6 | 1 |
| louislam/ | a4eab252e5a2 | nodemailer | 10.0.6 | 1 |
| louislam/ | a84767d7934f | nodemailer | 10.0.6 | 1 |
| louislam/ | bc6f244ecf27 | nodemailer | 10.0.6 | 1 |
| maildev/ | 180ef51f65ee | nodemailer | 10.0.6 | 1 |
| misskey/ | e08b7c478093 | nodemailer | 10.0.6 | 1 |
| moonrailgun/ | b528c8f8fcc4 | nodemailer | 10.0.6 | 1 |
| moreillon/ | d2ee0423b797 | nodemailer | 10.0.6 | 1 |
| n8nio/ | 761374d4eb84 | nodemailer | 10.0.6 | 1 |
| n8nio/ | 8b39ed5a2de9 | nodemailer | 10.0.6 | 1 |
| n8nio/ | 9f693fd55655 | nodemailer | 10.0.6 | 1 |
| n8nio/ | a9195bc499a3 | nodemailer | 10.0.6 | 1 |
| n8nio/ | cfe2704ff858 | nodemailer | 10.0.6 | 1 |
| n8nio/ | dd171d45102a | nodemailer | 10.0.6 | 1 |
| n8nio/ | e8302e8bd402 | nodemailer | 10.0.6 | 1 |
| n8nio/ | ed16e560c40e | nodemailer | 10.0.6 | 1 |
| n8nio/ | fdce8f852ac7 | nodemailer | 10.0.6 | 1 |
| netrisai/ | 6e865080e86c | nodemailer | 10.0.6 | 1 |
| nocodb/ | 4ccfc5114506 | nodemailer | 10.0.6 | 1 |