From 47f80317e4574ee2dfd05e10f9ad7489ed6544c9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 7 May 2026 15:48:12 -0400
Subject: [PATCH] [CoreI] Update dependency nodemailer to v8.0.5 [SECURITY]
 (#32703)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 3ae15cc3adad3d0212c46b5c478210dc9f20ef08
---
 package.json              |  2 +-
 services/web/package.json |  2 +-
 yarn.lock                 | 10 +++++-----
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index f4bc6f2b78..3f8c18402b 100644
--- a/package.json
+++ b/package.json
@@ -149,7 +149,7 @@
     "focus-trap-react": "11.0.4",
     "i18next-http-middleware": "3.5.0",
     "jose": "4.15.5",
-    "nodemailer": "7.0.11",
+    "nodemailer": "8.0.5",
     "on-headers": "1.0.2",
     "pug": "3.0.3",
     "rate-limiter-flexible": "2.4.1",
diff --git a/services/web/package.json b/services/web/package.json
index 0590ae9b88..a356a09d78 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -158,7 +158,7 @@
     "multer": "2.1.1",
     "nocache": "^2.1.0",
     "node-fetch": "^2.7.0",
-    "nodemailer": "^7.0.0",
+    "nodemailer": "^8.0.5",
     "on-headers": "^1.0.2",
     "otplib": "^12.0.1",
     "overleaf-editor-core": "workspace:*",
diff --git a/yarn.lock b/yarn.lock
index 8da8f0ddaf..5be2ec1c05 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7476,7 +7476,7 @@ __metadata:
     nocache: "npm:^2.1.0"
     nock: "npm:^13.5.6"
     node-fetch: "npm:^2.7.0"
-    nodemailer: "npm:^7.0.0"
+    nodemailer: "npm:^8.0.5"
     nvd3: "npm:^1.8.6"
     nyc: "npm:^17.1.0"
     on-headers: "npm:^1.0.2"
@@ -25370,10 +25370,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nodemailer@npm:7.0.11":
-  version: 7.0.11
-  resolution: "nodemailer@npm:7.0.11"
-  checksum: 10c0/208f108fdb4c5dd0e3a2f013578d53dad505cf1b9c7a084f6d22fc9d6f3912daafb4a23793ca568ff848afc35f15f4eb24382d3f6f9fb8ede4a8410d4ca63618
+"nodemailer@npm:8.0.5":
+  version: 8.0.5
+  resolution: "nodemailer@npm:8.0.5"
+  checksum: 10c0/5e8450499bd059c56d74ba96fa5f9928de2ecdae0d53c083dba5661d797114c1f9524d30f992d0263cc5a7dcf5a54b9c1d92dc1f766da150c9d0bde7d3798431
   languageName: node
   linkType: hard