From 876609f05ddad5a20252303d8e0afff7d432ded4 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 13 Oct 2025 20:02:53 +0000
Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-13378253
---
 server/package-lock.json | 15 ++++++++-------
 server/package.json      |  2 +-
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/server/package-lock.json b/server/package-lock.json
index be46f81..c36791e 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -16,7 +16,7 @@
         "express": "^4.17.3",
         "mongoose": "^6.2.10",
         "node-fetch": "^3.2.3",
-        "nodemailer": "^6.7.3",
+        "nodemailer": "^7.0.7",
         "request": "^2.88.2"
       },
       "devDependencies": {
@@ -2582,9 +2582,10 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "6.8.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.8.0.tgz",
-      "integrity": "sha512-EjYvSmHzekz6VNkNd12aUqAco+bOkRe3Of5jVhltqKhEsjw/y0PYPJfp83+s9Wzh1dspYAkUW/YNQ350NATbSQ==",
+      "version": "7.0.7",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.7.tgz",
+      "integrity": "sha512-jGOaRznodf62TVzdyhKt/f1Q/c3kYynk8629sgJHpRzGZj01ezbgMMWJSAjHADcwTKxco3B68/R+KHJY2T5BaA==",
+      "license": "MIT-0",
       "engines": {
         "node": ">=6.0.0"
       }
@@ -5390,9 +5391,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.8.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.8.0.tgz",
-      "integrity": "sha512-EjYvSmHzekz6VNkNd12aUqAco+bOkRe3Of5jVhltqKhEsjw/y0PYPJfp83+s9Wzh1dspYAkUW/YNQ350NATbSQ=="
+      "version": "7.0.7",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.7.tgz",
+      "integrity": "sha512-jGOaRznodf62TVzdyhKt/f1Q/c3kYynk8629sgJHpRzGZj01ezbgMMWJSAjHADcwTKxco3B68/R+KHJY2T5BaA=="
     },
     "nodemon": {
       "version": "2.0.20",
diff --git a/server/package.json b/server/package.json
index 8e838c5..9de3b57 100644
--- a/server/package.json
+++ b/server/package.json
@@ -25,7 +25,7 @@
     "express": "^4.17.3",
     "mongoose": "^6.2.10",
     "node-fetch": "^3.2.3",
-    "nodemailer": "^6.7.3",
+    "nodemailer": "^7.0.7",
     "request": "^2.88.2"
   },
   "devDependencies": {