Skip to content
This repository was archived by the owner on Jul 23, 2026. It is now read-only.

chore(deps): update dependency nodemailer to v7.0.11 - #20

Open
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/nodemailer-7.x-lockfile
Open

chore(deps): update dependency nodemailer to v7.0.11#20
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/nodemailer-7.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-commend-for-github-comBot commented Dec 18, 2025

Copy link
Copy Markdown

This PR contains the following updates:

PackageChangeAgeConfidence
nodemailer (source)7.0.107.0.11ageconfidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS ScoreVulnerabilityGitHub Issue
High7.5CVE-2025-14874#23

Release Notes

nodemailer/nodemailer (nodemailer)

v7.0.11

Compare Source

Bug Fixes
  • prevent stack overflow DoS in addressparser with deeply nested groups (b61b9c0)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-commend-for-github-comBot added the security fix Security fix generated by Mend label Dec 18, 2025
Sign up for freeto subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

security fixSecurity fix generated by Mend

Development

Successfully merging this pull request may close these issues.

0 participants