From 01c935261ba6f9adf9bebdb77d6f23f844d19e22 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Thu, 22 Oct 2026 06:53:04 +0200 Subject: [PATCH] chore(deps): take nodemailer 10.1.7 for the address parser advisories GHSA-8c8m-p3m8-cjg8 and two sibling advisories against the address parser are fixed in 10.1.4; 10.1.5 to 10.1.7 are linear-time and encoding fixes on the same line. The email channel hands the parser a recipient address each account sets for itself. --- package.json | 2 +- pnpm-lock.yaml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 2f3026328..06671fd29 100644 --- a/package.json +++ b/package.json @@ -80,7 +80,7 @@ "lucide-react": "^1.59.0", "mmdb-lib": "^3.0.3", "next": "16.3.8", - "nodemailer": "10.1.2", + "nodemailer": "10.1.7", "otpauth": "^9.5.2", "p-limit": "^7.3.3", "pg": "^8.23.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3d648306e..6cee5a51f 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -127,8 +127,8 @@ importers: specifier: 16.3.8 version: 16.3.8(@babel/core@7.29.7(supports-color@7.2.0))(@opentelemetry/api@1.9.1)(@playwright/test@1.64.1)(@types/node@26.6.5)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) nodemailer: - specifier: 10.1.2 - version: 10.1.2 + specifier: 10.1.7 + version: 10.1.7 otpauth: specifier: ^9.5.2 version: 9.5.2 @@ -5698,8 +5698,8 @@ packages: resolution: {integrity: sha512-BdiKAgbfRlvfMq/XzO/AF9NPmaA8a+YpLAyAFTVFBj3gARrAIfWvNq7Q7NE4se3KgFu0KkrvQMxTS0XVnsGzHg==} engines: {node: '>=18'} - nodemailer@10.1.2: - resolution: {integrity: sha512-rnQn9Rzh8RAwcp42MVsIvxbsv6YZ2a2/av+uyJ/LPU1+2QSlrRgFsWWZTKenyRUqkIl8urOI0c4+CEcmFdsvQw==} + nodemailer@10.1.7: + resolution: {integrity: sha512-OQa6FDln5fLttmqSbjDiRYvFDOFNrBqfiOwHPlEbURil3b+vPB1v8xpi+Sp46drzNDlsTnNsS502vthmz56r4w==} engines: {node: '>=20.0.0'} non-error@0.1.0: @@ -12883,7 +12883,7 @@ snapshots: node-releases@2.0.58: {} - nodemailer@10.1.2: {} + nodemailer@10.1.7: {} non-error@0.1.0: {}