What is GHSA-fv2f-rw9f-v9cm?

GHSA-fv2f-rw9f-v9cm is a security advisory published by GitHub Security Advisories with High severity. An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of...

Which CVE IDs does GHSA-fv2f-rw9f-v9cm cover?

GHSA-fv2f-rw9f-v9cm covers the following CVE IDs: CVE-2026-38728. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fv2f-rw9f-v9cm?

GHSA-fv2f-rw9f-v9cm has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-fv2f-rw9f-v9cmHighCVSS 7.5

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of...

Vendor

GitHub Security Advisories

Published

May 15, 2026

Last Modified

May 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-38728 →

📋 Description

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-38728
https://bytecreator.dev/blog/CVE-2026-38728
https://github.com/nodemailer/smtp-server
https://github.com/nodemailer/smtp-server/releases/tag/v3.18.3
https://github.com/advisories/GHSA-fv2f-rw9f-v9cm