Merge pull request #28900 from overleaf/renovate-npm-nodemailer-vulnerability

[Core] Update dependency nodemailer to v7 from ^6.7.0 [SECURITY]

GitOrigin-RevId: aad91a856904c3885d687f2dbfbf52872907aa6f
This commit is contained in:
David
2025-10-13 11:06:17 +01:00
committed by Copybot
parent cb7f6d4692
commit 4c842959fa
2 changed files with 18 additions and 5 deletions

21
package-lock.json generated
View File

@@ -37900,9 +37900,13 @@
"license": "MIT"
},
"node_modules/nodemailer": {
"version": "6.9.9",
"resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.9.9.tgz",
"integrity": "sha512-dexTll8zqQoVJEZPwQAKzxxtFn0qTnjdQTchoU6Re9BUUGBJiOy3YMn/0ShTW6J5M0dfQ1NeDeRTTl4oIWgQMA==",
"version": "6.10.1",
"resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.10.1.tgz",
"integrity": "sha512-Z+iLaBGVaSjbIzQ4pX6XV41HrooLsQ10ZWPUehGmuantvzWoDVBnmsdUcOIDM1t+yPor5pDhVlDESgOMEGxhHA==",
"dev": true,
"license": "MIT-0",
"optional": true,
"peer": true,
"engines": {
"node": ">=6.0.0"
}
@@ -52705,7 +52709,7 @@
"multer": "2.0.2",
"nocache": "^2.1.0",
"node-fetch": "^2.7.0",
"nodemailer": "^6.7.0",
"nodemailer": "^7.0.0",
"on-headers": "^1.0.2",
"otplib": "^12.0.1",
"overleaf-editor-core": "*",
@@ -53802,6 +53806,15 @@
"node": ">= 10.13"
}
},
"services/web/node_modules/nodemailer": {
"version": "7.0.9",
"resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.9.tgz",
"integrity": "sha512-9/Qm0qXIByEP8lEV2qOqcAW7bRpL8CR9jcTwk3NBnHJNmP9fIJ86g2fgmIXqHY+nj55ZEMwWqYAT2QTDpRUYiQ==",
"license": "MIT-0",
"engines": {
"node": ">=6.0.0"
}
},
"services/web/node_modules/p-limit": {
"version": "2.3.0",
"resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",