yusufipek/OpenFrame
1
0
Fork 0
mirror of https://github.com/yusufipk/OpenFrame.git synced 2026-09-11 09:36:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): bump nodemailer to 9.0.1

Browse Source 
Resolves the high-severity advisory (dependabot #20) where the
message-level raw option bypassed disableFileAccess/disableUrlAccess,
enabling arbitrary file read and SSRF. We only use the standard
createTransport/sendMail API, so the major bump is non-breaking.
This commit is contained in:
yusufipk
2026-06-27 13:38:07 +02:00
parent 95dcf92d8b
commit cebdf23b38
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+1 -1
View File
@@ -43,7 +43,7 @@
"next": "16.2.6",
"next-auth": "^5.0.0-beta.30",
"next-themes": "^0.4.6",
"nodemailer": "^8.0.5",
"nodemailer": "^9.0.1",
"pg": "^8.18.0",
"prisma": "^7.3.0",
"radix-ui": "^1.4.3",