Upgrade nodemailer 6.x→8.x (2 CVEs fixed)

2026-02-19 11:10:00 +00:00
parent c8021495a1
commit 814520f8cc
2 changed files with 2 additions and 1 deletions
@@ -22,7 +22,7 @@
    "express-rate-limit": "^7.5.0",
    "helmet": "^8.1.0",
    "jsonwebtoken": "^9.0.2",
-    "nodemailer": "^6.10.1",
+    "nodemailer": "^8.0.1",
    "react": "^18.3.1",
    "zod": "^3.24.4"
  },
@@ -11,6 +11,7 @@ server {
    listen 80;
    listen [::]:80;
    server_name _;
+    server_tokens off;

    # Security headers (X-Frame-Options, HSTS, X-Content-Type-Options set by Caddy)
    add_header X-XSS-Protection "0" always;