StackRadar

CVE-2026-100700

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,957 indexed, latest versions
Container images
192
deployed by those charts
Fix available
1 of 1
affected package

Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service

Carried by container images the latest versions of 206 of 17,957 indexed charts deploy, on 192 images.

Affected packageAffected versionsFixed inImages
nodemailernpm1.11.0, 2.7.2, 4.0.1, 4.6.8+54 more10.0.6192
OSV records
GHSA-v53p-9fqp-m79j

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.0.6

Open the chart page →

2,529
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
nodemailer@6.9.9
10.0.6

Open the chart page →

7,015
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
twentycrm/twenty:latest47bcefe4e497
nodemailer@9.1.1
10.0.6

Open the chart page →

74,963
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
nodemailer@6.9.1
10.0.6

Open the chart page →

4,129
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
requarks/wiki:2af71a17dc27c
nodemailer@6.9.1
10.0.6

Open the chart page →

3,876
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2026-100700.

Container imageDigestPackageFixed in
library/kibana:8.19.2235544f1ff28a
nodemailer@9.0.4
10.0.6

Open the chart page →

1,405

Container images carrying it

192 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
nocodb/nocodb:0.258.06779a4ddedf2
nodemailer@6.9.16
10.0.6
1
nocodb/nocodb:0.301.5d9516f0bf546
nodemailer@7.0.13
10.0.6
1
nodered/node-red-docker:0.19.6-v8070643219ea2
nodemailer@1.11.0
10.0.6
1
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
nodemailer@6.6.2
10.0.6
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
nodemailer@6.7.2
10.0.6
1
oneuptime/nginx:release906acce7e252
nodemailer@10.0.3
10.0.6
1
oneuptime/probe:release2a170032aee8
nodemailer@10.0.3
10.0.6
1
oneuptime/runner:release86060743a718
nodemailer@10.0.3
10.0.6
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
nodemailer@6.4.18
10.0.6
1
outlinewiki/outline:0.82.0494dfb9249a6
nodemailer@6.10.0
10.0.6
1
outlinewiki/outline:1.10.1832051f039b4
nodemailer@9.0.5
10.0.6
1
polonel/trudesk:1.2.60cf6513f6fe3
nodemailer@6.7.3
10.0.6
1
requarks/wiki:canary-2.5.2438b5865a7386c
nodemailer@6.4.14
10.0.6
1
requarks/wiki:2af71a17dc27c
nodemailer@6.9.1
10.0.6
1
rocketadmin/rocketadmin:1.17.710955ef540b9
nodemailer@8.0.5
10.0.6
1
shinobisystems/shinobi:dev3ca746937856
nodemailer@6.6.1
10.0.6
1
shinobisystems/shinobi:latestc2f5ce2e1067
nodemailer@6.6.1
10.0.6
1
solidproject/community-server:6.0.2ccc4acb7e9a1
nodemailer@6.9.1
10.0.6
1
soulteary/cronicle:0.9.80ac2512fa6e39
nodemailer@6.10.0
10.0.6
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
nodemailer@6.7.5
10.0.6
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.26.379f14a2bf931
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
nodemailer@6.9.9
10.0.6
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
nodemailer@6.9.9
10.0.6
1
stanfordoval/almond-server:latest1a63cdccedaf
nodemailer@6.7.2
10.0.6
1
supporttools/uptime-kuma:v2.6f8a49ed65809
nodemailer@6.9.13
10.0.6
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
nodemailer@6.7.2
10.0.6
1
twentycrm/twenty:latest:v2.41.047bcefe4e497
nodemailer@9.1.1
10.0.6
1
twentycrm/twenty:v2.43.0b2b662b1bef1
nodemailer@9.1.1
10.0.6
1
twentycrm/twenty:v2.22.0e7d9948bf284
nodemailer@9.0.1
10.0.6
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
nodemailer@7.0.13
10.0.6
1
unleashorg/unleash-server:7.5.09adb37e399ba
nodemailer@7.0.11
10.0.6
1
veecode/devportal7a3d61de5e5e
nodemailer@8.0.11
10.0.6
1
zooz/predator:1.6f491d1f7a865
nodemailer@6.7.3
10.0.6
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
nodemailer@6.9.13
10.0.6
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
nodemailer@10.0.2
10.0.6
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
nodemailer@7.0.13
10.0.6
1
ghcr.io/bluesky-social/pds:0.405e164855fa1
nodemailer@6.10.1
10.0.6
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
nodemailer@6.10.1
10.0.6
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
nodemailer@6.10.1
10.0.6
1
ghcr.io/colanode/server:latest7006cac874fd
nodemailer@8.0.4
10.0.6
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nodemailer@4.6.8
10.0.6
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nodemailer@6.1.1
10.0.6
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nodemailer@6.1.1
10.0.6
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nodemailer@6.1.1
10.0.6
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.