Skip to content
OpenAdvisories

Package · npm

smtp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-38728

    smtp-server's command parser memory exhaustion denial-of-service

    An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components

    smtp-server npm