🔒 fix: upgrade nodemailer to v8 to fix SMTP command injection (#13479)

This commit is contained in:
YuTengjing 2026-04-01 21:51:32 +08:00 committed by GitHub
parent 8af28a778b
commit df6d8f19f8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -354,7 +354,7 @@
"next-themes": "^0.4.6",
"nextjs-toploader": "^3.9.17",
"node-machine-id": "^1.1.12",
"nodemailer": "^7.0.13",
"nodemailer": "^8.0.4",
"numeral": "^2.0.6",
"nuqs": "^2.8.6",
"officeparser": "5.1.1",