[Snyk] Upgrade nodemailer from 6.4.6 to 6.7.6

[snyk-bot]

Snyk has created this PR to upgrade nodemailer from 6.4.6 to 6.7.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 25 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2022-06-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Command Injection SNYK-JS-NODEMAILER-1038834	751/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.6	Proof of Concept
	HTTP Header Injection SNYK-JS-NODEMAILER-1296415	751/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: nodemailer

• 6.7.6 - 2022-06-30
  

  • Reject verify() if the server supports authentication but no credentials were provided

  • v6.7.6

• 6.7.5 - 2022-05-04
  

  v6.7.5

• 6.7.4 - 2022-04-28
  

  v6.7.4

• 6.7.3 - 2022-03-21
  

  v6.7.3

• 6.7.2 - 2021-11-26
  

  v6.7.2

• 6.7.1 - 2021-11-15
  

  v6.7.1

• 6.7.0 - 2021-10-11
  

  v6.7.0

• 6.6.5 - 2021-09-23
  

  v6.6.5

• 6.6.4 - 2021-09-23
  

  v6.6.4

• 6.6.3 - 2021-07-14
  

  v6.6.3

• 6.6.2 - 2021-06-18
• 6.6.1 - 2021-05-23
• 6.6.0 - 2021-04-28
• 6.5.0 - 2021-02-26
• 6.4.18 - 2021-02-11
• 6.4.17 - 2020-12-11
• 6.4.16 - 2020-11-12
• 6.4.15 - 2020-11-06
• 6.4.14 - 2020-10-14
• 6.4.13 - 2020-10-02
• 6.4.12 - 2020-09-30
• 6.4.11 - 2020-07-29
• 6.4.10 - 2020-06-17
• 6.4.8 - 2020-05-28
• 6.4.7 - 2020-05-28
• 6.4.6 - 2020-03-20

from nodemailer GitHub release notes

Commit messages

Package name: nodemailer

• 3e0578d Reject unauthenticated verify call (#1434)
• bc647a4 Update test.yml (#1428)
• aa3b62a Add Bluewin config to well known services (#1402)
• 1fcd9ba Update SendCloud service config (#1397)
• 5207f42 renamed invalid mime type (#1427)
• 6a1381c Fix typo in base64/index.js
• 38e5773 v6.7.5
• 48011b9 Updated readme
• 8106f9f v6.7.4
• d110bd2 increased test time window for ses tests
• 06f6fc2 updated gitattributes
• de35107 updated gitattributes
• b90e0a5 removed node 10 from test matrix
• 3491486 ensure comptibility with Node 18
• e8b2db3 Merge branch 'master' of github.com:nodemailer/nodemailer
• 66d5f1d Updated FAQ in readme
• 10402f2 Update report-an-issue.md
• 4662168 v6.7.3
• a52219d Add domain property to Infomaniak config
• cede171 Add Infomaniak config to well known services
• a2194e5 Update report-an-issue.md
• 22e8594 Create stale.yml
• 75a1504 fix: DSN recipient gets ignored
• 97efb04 Update Outlook/Hotmail host

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs