Skip to content

[Snyk] Upgrade nodemailer from 7.0.5 to 7.0.12#6

Open
yousecjoe wants to merge 1 commit intomainfrom
snyk-upgrade-cdec7328712aff680206454eb9ddae05
Open

[Snyk] Upgrade nodemailer from 7.0.5 to 7.0.12#6
yousecjoe wants to merge 1 commit intomainfrom
snyk-upgrade-cdec7328712aff680206454eb9ddae05

Conversation

@yousecjoe
Copy link
Member

snyk-top-banner

Snyk has created this PR to upgrade nodemailer from 7.0.5 to 7.0.12.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 6 versions ahead of your current version.

  • The recommended version was released 23 days ago.

Release notes
Package name: nodemailer
  • 7.0.12 - 2025-12-22

    7.0.12 (2025-12-22)

    Bug Fixes

    • added support for REQUIRETLS (#1793) (053ce6a)
    • use 8bit encoding for message/rfc822 attachments (adf8611)
  • 7.0.11 - 2025-11-26

    7.0.11 (2025-11-26)

    Bug Fixes

    • prevent stack overflow DoS in addressparser with deeply nested groups (b61b9c0)
  • 7.0.10 - 2025-10-23

    7.0.10 (2025-10-23)

    Bug Fixes

    • Increase data URI size limit from 100KB to 50MB and preserve content type (28dbf3f)
  • 7.0.9 - 2025-10-07

    7.0.9 (2025-10-07)

    Bug Fixes

    • release: Trying to fix release proecess by upgrading Node version in runner (579fce4)
  • 7.0.7 - 2025-10-05

    7.0.7 (2025-10-05)

    Bug Fixes

    • addressparser: Fixed addressparser handling of quoted nested email addresses (1150d99)
    • dns: add memory leak prevention for DNS cache (0240d67)
    • linter: Updated eslint and created prettier formatting task (df13b74)
    • refresh expired DNS cache on error (#1759) (ea0fc5a)
    • resolve linter errors in DNS cache tests (3b8982c)
  • 7.0.6 - 2025-08-30

    7.0.6 (2025-08-27)

    Bug Fixes

    • encoder: avoid silent data loss by properly flushing trailing base64 (#1747) (01ae76f)
    • handle multiple XOAUTH2 token requests correctly (#1754) (dbe0028)
    • ReDoS vulnerability in parseDataURI and _processDataUrl (#1755) (90b3e24)
  • 7.0.5 - 2025-07-07

    7.0.5 (2025-07-07)

    Bug Fixes

    • updated well known delivery service list (fa2724b)
from nodemailer GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@coderabbitai
Copy link

coderabbitai bot commented Jan 14, 2026

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch snyk-upgrade-cdec7328712aff680206454eb9ddae05

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants