[Snyk] Fix for 1 vulnerabilities

[mhmtayberk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • server/package.json
  • server/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEMAILER-6219989	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mailparser

The new version differs by 51 commits.

• 6adad57 chore(master): release 3.6.7 [skip-ci] (install script not working Mailtrain-org/mailtrain#358)
• 8bc4225 fix: ⬆️ update nodemailer dependency to resolve security issue GHSA-9h6g-pr28-7cqp (Multiple users with different smtp? Mailtrain-org/mailtrain#357)
• 3f8a516 chore(master): release 3.6.6 [skip-ci] (Best approach for "A/B testing"? Mailtrain-org/mailtrain#354)
• 6bae600 fix: Fix produced text address list string according to rfc 2822 ([LDAP auth] No differentiation between "bind" user and "search" user Mailtrain-org/mailtrain#340)
• a2ba9c2 fix(test): updated test matrix (18, 20, 21)
• 7d78cb9 removed node v16 from test matrix
• d6eb56f fix(deploy): added auto-deployment
• 92b73a2 v3.6.5
• 5070a32 Replaces optional chaining
• 80ba89e Fixes CustomFields Mailtrain-org/mailtrain#346
• ac11f78 v3.6.4
• 38b7df2 Merge branch 'jonny64-v3.4.0_hang'
• a645760 Do not repeat processing invalidly encoded address
• ad0c383 Merge branch 'v3.4.0_hang' of github.com:jonny64/mailparser into jonny64-v3.4.0_hang
• 694416e add test Form translations / interantionalization? Mailtrain-org/mailtrain#337
• dd33c76 remove redundant content type check
• b1d6a25 v3.6.3
• b1f0775 v3.6.2
• 7bef1fc v3.6.1
• 22ad3c6 Update package.json
• beffb6e Updated test workflow
• 3778c7c v3.6.0
• dfdbe6f chore: bump libmime from 5.1.0 to 5.2.0
• b6bba6e v3.5.0

See the full diff

Package name: nodemailer

The new version differs by 179 commits.

• 5a2e10f chore(master): release 6.9.9 [skip-ci] (#1606)
• dd8f5e8 fix(security): Fix issues described in GHSA-9h6g-pr28-7cqp. Do not use eternal matching pattern if only a few occurences are expected
• 2c2b46a chore: do not use caret in version specifier
• be45c1b fix(tests): Use native node test runner, added code coverage support, removed grunt (#1604)
• 4233f6f chore(master): release 6.9.8 [skip-ci] (#1605)
• 09d502f chore: removed double file
• b4d0e0c fix(punycode): do not use native punycode module
• 8376c02 Test new github notice syntax for README
• bc46a3b Updated stale github action
• 78bdaf8 chore: remove redundant AWS SDK for JavaScript v2 (#1593)
• 971ced7 chore: add mailcatch.app to well-known/services.json (#1586)
• 879e562 chore(master): release 6.9.7 [skip-ci] (#1585)
• 140e3b0 Merge branch 'master' of github.com:nodemailer/nodemailer
• 41d482c fix(customAuth): Do not require user and pass to be set for custom authentication schemes (fixes #1584)
• 20e9fe0 update - `services.json` - add SES SMTP endpoints for the AP region (#1580)
• 9da77b6 chore(master): release 6.9.6 [skip-ci] (#1578)
• 7fe0a60 fix(tests): Removed Node v12 from test matrix as it is not compatible with the test framework anymore
• db32c93 fix(inline): Use 'inline' as the default Content Dispostion value for embedded images
• fdc7c27 chore(master): release 6.9.5 [skip-ci] (#1573)
• da4744e fix(license): Updated license year
• 13672b2 Removed legacy files (#1571)
• afd2287 Added release workflow to publish npm packages from Github
• 1ae83a2 Update services.json
• 286dc28 v6.9.4

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/[email protected]	None	+2	61.8 kB	nicolo-ribaudo
npm/@babel/[email protected]	None	+3	2.27 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+8	3.9 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+3	2.16 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+3	2.16 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+1	54.5 kB	nicolo-ribaudo
npm/@babel/[email protected]	None	0	1.7 MB	nicolo-ribaudo
npm/@babel/[email protected]	Transitive: eval	+2	2.72 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+1	117 kB	nicolo-ribaudo
npm/@babel/[email protected]	None	+6	3.89 MB	nicolo-ribaudo
npm/@babel/[email protected]	environment	+11	4.18 MB	nicolo-ribaudo
npm/@babel/[email protected]	None	+2	2.15 MB	nicolo-ribaudo
npm/@selderee/[email protected]	None	+6	302 kB	killy.mxi
npm/@types/[email protected]	None	0	55.3 kB	types
npm/@types/[email protected]	None	0	4 kB	types
npm/@types/[email protected]	None	0	637 kB	types
npm/@types/[email protected]	None	+1	643 kB	types
npm/@types/[email protected]	None	0	10.6 kB	types
npm/[email protected]	None	0	10.8 kB	jeffcarp
npm/[email protected]	None	+3	247 kB	dougwilson
npm/[email protected]	None	+2	1.2 MB	forbeslindesay
npm/[email protected]	None	0	95.7 kB	marijn
npm/[email protected]	None	+1	169 kB	tnpi
npm/[email protected]	None	0	2.05 kB	jongleberry
npm/[email protected]	unsafe	+1	148 kB	indutny
npm/[email protected]	None	0	53.8 kB	strml
npm/[email protected]	environment, filesystem, network, shell	+13	47.2 MB	aws-sdk-bot
npm/[email protected]	Transitive: environment, eval, filesystem, shell, unsafe	+87	19.1 MB	hzoo
npm/[email protected]	None	0	13 kB	feross
npm/[email protected]	None	0	385 kB	mikemcl
npm/[email protected]	None	0	5.07 kB	sindresorhus
npm/[email protected]	None	0	99.4 kB	indutny
npm/[email protected]	network Transitive: environment, eval	+15	698 kB	dougwilson
npm/[email protected]	None	0	3.26 kB	kumavis
npm/[email protected]	None	+2	284 kB	feross
npm/[email protected]	None	0	5.25 kB	grncdr
npm/[email protected]	None	+6	891 kB	chaijs
npm/[email protected]	None	0	20.2 kB	chaijs
npm/[email protected]	environment, filesystem	+12	364 kB	paulmillr
npm/[email protected]	environment	0	5.27 kB	knownasilya
npm/[email protected]	filesystem, shell, unsafe	0	338 kB	geoffreybooth
npm/[email protected]	None	+1	194 kB	dougwilson
npm/[email protected]	environment, filesystem	+2	207 kB	lorenwest
npm/[email protected]	None	0	19.1 kB	dougwilson
npm/[email protected]	None	0	10.2 kB	dougwilson
npm/[email protected]	None	+2	28 kB	dougwilson
npm/[email protected]	None	0	0 B	natevw
npm/[email protected]	None	0	16.8 kB	dougwilson
npm/[email protected]	None	0	58.7 kB	nv
npm/[email protected]	None	+1	265 kB	jon.sakas
npm/[email protected]	network Transitive: environment, eval	+12	145 kB	dougwilson
npm/[email protected]	None	0	131 kB	david
npm/[email protected]	None	0	68.9 kB	david
npm/[email protected]	Transitive: environment, filesystem	+12	350 kB	felixge
npm/[email protected]	None	+1	96.1 kB	chaijs
npm/[email protected]	None	0	8.22 kB	thlorenz
npm/[email protected]	None	0	31.2 kB	tehshrike
npm/[email protected]	Transitive: filesystem, unsafe	+2	3.74 MB	rguerreiro
npm/[email protected]	None	0	12.8 kB	riaevangelist
npm/[email protected]	None	0	120 kB	jackbowman
npm/[email protected]	None	+1	345 kB	andris
npm/[email protected]	None	0	318 kB	stefanpenner
npm/[email protected]	None	+10	678 kB	michaelficarra
npm/[email protected]	None	0	22.5 kB	eslint
npm/[email protected]	None	0	295 kB	ariya
npm/[email protected]	None	+1	128 kB	michaelficarra
npm/[email protected]	None	+1	46.5 kB	michaelficarra
npm/[email protected]	None	0	33 kB	nzakas
npm/[email protected]	environment Transitive: eval	+6	157 kB	dougwilson
npm/[email protected]	environment, filesystem, network Transitive: eval	+44	1.49 MB	dougwilson
npm/[email protected]	filesystem Transitive: environment	+8	231 kB	malept
npm/[email protected]	filesystem	+1	34.8 kB	superjoe
npm/[email protected]	environment	+6	62.5 kB	dougwilson
npm/[email protected]	filesystem	+11	78.6 kB	phated
npm/[email protected]	None	0	20.9 kB	webreflection
npm/[email protected]	None	0	5.55 kB	dougwilson
npm/[email protected]	None	0	44.8 kB	paulmillr
npm/[email protected]	None	0	9.83 kB	chaijs
npm/[email protected]	None	0	8.35 kB	tkellen
npm/[email protected]	Transitive: environment, filesystem, shell	+4	222 kB	aaron
npm/[email protected]	Transitive: environment, filesystem, shell	+38	578 kB	vladikoff
npm/[email protected]	None	0	4.36 kB	shama
npm/[email protected]	None	+1	1.41 MB	vladikoff
npm/[email protected]	None	+4	1.52 MB	vladikoff
npm/[email protected]	shell	+6	1.86 MB	vladikoff
npm/[email protected]	Transitive: environment, eval, filesystem, shell, unsafe	+37	3.59 MB	vladikoff
npm/[email protected]	filesystem Transitive: environment, eval	+5	3.87 MB	knappi
npm/[email protected]	filesystem Transitive: environment, eval	+8	3.78 MB	dougwilson
npm/[email protected]	Transitive: environment, eval	+4	66.8 kB	dougwilson
npm/[email protected]	None	+2	598 kB	jamuhl
npm/[email protected]	None	0	336 kB	ashtuchkin
npm/[email protected]	None	0	7.09 kB	feross
npm/[email protected]	None	0	14.6 kB	cwmma
npm/[email protected]	Transitive: filesystem, unsafe	+3	19.4 kB	sindresorhus
npm/[email protected]	Transitive: environment, filesystem, shell	+19	6.85 MB	sboudrias
npm/[email protected]	None	0	14.5 kB	phated
npm/[email protected]	None	0	42.1 kB	whitequark
npm/[email protected]	None	0	2.48 kB	sindresorhus
npm/[email protected]	None	0	2.61 kB	forbeslindesay
npm/[email protected]	None	0	222 kB	jamesls
npm/[email protected]	Transitive: environment, filesystem, network, shell	+13	1.4 MB	bitwiseman
npm/[email protected]	None	0	9.22 kB	riaevangelist
npm/[email protected]	None	+1	25.9 kB	riaevangelist
npm/[email protected]	eval	0	283 kB	vitaly
npm/[email protected]	Transitive: environment	+6	1.6 MB	stuk
npm/[email protected]	None	0	18.3 kB	killy.mxi
npm/[email protected]	None	+1	73.8 kB	cwmma
npm/[email protected]	None	+1	63.5 kB	vitaly
npm/[email protected]	Transitive: network	+25	4.06 MB	andris
npm/[email protected]	None	+1	216 kB	andris
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	filesystem Transitive: environment, eval, network, shell	+117	13.6 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	filesystem Transitive: environment, eval, network, shell	+97	12.8 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+95	12.7 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	filesystem Transitive: environment, eval, network	+11	4.04 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+98	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval	+6	3.77 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+99	12.9 MB	kmcb
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+142	13.9 MB	kmcb
npm/[email protected]	None	+1	3.91 MB	ellenaua
npm/[email protected]	None	0	2.79 MB	marwahaha
npm/[email protected]	eval Transitive: environment	+5	94.1 kB	dougwilson
npm/[email protected]	None	0	9.39 kB	lukeed
npm/[email protected]	filesystem Transitive: environment	+17	1.08 MB	linusu
npm/[email protected]	filesystem, network Transitive: environment	+4	924 kB	dougwilson
npm/[email protected]	None	0	48.8 kB	ai
npm/[email protected]	None	0	28 kB	dougwilson
npm/[email protected]	filesystem, network	+4	187 kB	riaevangelist
npm/[email protected]	environment, network Transitive: eval, filesystem	+10	427 kB	eugef
npm/[email protected]	None	0	500 kB	andris
npm/[email protected]	None	0	81.3 kB	diego
npm/[email protected]	Transitive: environment, filesystem, network, unsafe	+5	8.82 MB	twiss
npm/[email protected]	None	+6	195 kB	gkz
npm/[email protected]	None	0	6.69 kB	sindresorhus
npm/[email protected]	None	0	786 kB	vitaly
npm/[email protected]	None	+2	161 kB	killy.mxi
npm/[email protected]	None	0	9.72 kB	dougwilson
npm/[email protected]	None	0	23.7 kB	chaijs
npm/[email protected]	None	0	101 kB	killy.mxi
npm/[email protected]	None	+1	471 kB	mel
npm/[email protected]	None	+2	63.1 kB	dougwilson
npm/[email protected]	network Transitive: environment, eval	+6	93.8 kB	dougwilson
npm/[email protected]	filesystem	+1	96.1 kB	paulmillr
npm/[email protected]	Transitive: environment, eval, filesystem, network	+19	4.55 MB	analog-nico
npm/[email protected]	Transitive: environment, eval, filesystem, network	+21	4.57 MB	analog-nico
npm/[email protected]	Transitive: environment, eval, filesystem, network	+21	4.6 MB	analog-nico
npm/[email protected]	None	+1	7.94 kB	sboudrias
npm/[email protected]	None	0	58.2 kB	srijs
npm/[email protected]	None	+1	5.1 MB	blesh
npm/[email protected]	None	+1	131 kB	lddubeau
npm/[email protected]	None	+3	205 kB	killy.mxi
npm/[email protected]	None	0	0 B	jmleyba
npm/[email protected]	filesystem, network Transitive: environment, eval	+15	238 kB	dougwilson
npm/[email protected]	Transitive: environment, eval, filesystem, network	+16	263 kB	dougwilson
npm/[email protected]	None	0	1.4 kB	sindresorhus
npm/[email protected]	None	0	11.6 kB	simov
npm/[email protected]	network Transitive: environment, filesystem, shell	+3	683 kB	andris
npm/[email protected]	None	0	56.8 kB	joris-van-der-wel
npm/[email protected]	Transitive: eval	+7	3.08 MB	gajus
npm/[email protected]	None	0	4.49 kB	dominicbarnes
npm/[email protected]	None	0	18.8 kB	tlds-bot
npm/[email protected]	None	0	38.1 kB	typescript
npm/[email protected]	None	0	8.07 kB	vitaly
npm/[email protected]	eval, filesystem	0	775 kB	alexlamsl
npm/[email protected]	None	0	138 kB	esamatti
npm/[email protected]	environment, filesystem, shell	0	10.3 kB	phated
npm/[email protected]	None	+1	17.8 kB	timothygu
npm/[email protected]	filesystem	+1	39.1 kB	coolaj86
npm/[email protected]	Transitive: environment	+1	13.7 kB	berkeleytrue
npm/[email protected]	None	+3	495 kB	domenic
npm/[email protected]	network	+1	155 kB	lpinca
npm/[email protected]	None	+2	212 kB	leonidas
npm/[email protected]	None	0	104 kB	oozcitak
npm/[email protected]	None	0	48.3 kB	lddubeau
npm/[email protected]	filesystem	0	10.4 kB	nexdrew
npm/[email protected]	environment	0	56.6 kB	bcoe
npm/[email protected]	environment, filesystem	+5	312 kB	bcoe
npm/[email protected]	filesystem	+2	81.9 kB	thejoshwolfe

🚮 Removed packages: npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎