[Snyk] Upgrade nodemailer from 6.4.6 to 6.9.14

[angeloreale]

Snyk has created this PR to upgrade nodemailer from 6.4.6 to 6.9.14.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 43 versions ahead of your current version.

• The recommended version was released on 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Command Injection SNYK-JS-NODEMAILER-1038834	751	Proof of Concept
	HTTP Header Injection SNYK-JS-NODEMAILER-1296415	751	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEMAILER-6219989	751	Proof of Concept

Release notes

Package name: nodemailer

• 6.9.14 - 2024-06-19
  

  6.9.14 (2024-06-19)

  Bug Fixes

  • api: Added support for Ethereal authentication (56b2205)
  • services.json: Add Email Services Provider Feishu Mail (CN) (#1648) (e9e9ecc)
  • services.json: update Mailtrap host and port in well known (#1652) (fc2c9ea)
  • well-known-services: Add Loopia in well known services (#1655) (21a28a1)
• 6.9.13 - 2024-03-20
  

  6.9.13 (2024-03-20)

  Bug Fixes

  • tls: Ensure servername for SMTP (d66fdd3)
• 6.9.12 - 2024-03-08
  

  6.9.12 (2024-03-08)

  Bug Fixes

  • message-generation: Escape single quote in address names (4ae5fad)
• 6.9.11 - 2024-02-29
  

  6.9.11 (2024-02-29)

  Bug Fixes

  • headers: Ensure that Content-type is the bottom header (c7cf97e)
• 6.9.10 - 2024-02-22
  

  6.9.10 (2024-02-22)

  Bug Fixes

  • data-uri: Do not use regular expressions for parsing data URI schemes (12e65e9)
  • data-uri: Moved all data-uri regexes to use the non-regex parseDataUri method (edd5dfe)
• 6.9.9 - 2024-02-01
  

  6.9.9 (2024-02-01)

  Bug Fixes

  • security: Fix issues described in GHSA-9h6g-pr28-7cqp. Do not use eternal matching pattern if only a few occurences are expected (dd8f5e8)
  • tests: Use native node test runner, added code coverage support, removed grunt (#1604) (be45c1b)
• 6.9.8 - 2023-12-30
  

  6.9.8 (2023-12-30)

  Bug Fixes

  • punycode: do not use native punycode module (b4d0e0c)
• 6.9.7 - 2023-10-22
  

  6.9.7 (2023-10-22)

  Bug Fixes

  • customAuth: Do not require user and pass to be set for custom authentication schemes (fixes #1584) (41d482c)
• 6.9.6 - 2023-10-09
  

  6.9.6 (2023-10-09)

  Bug Fixes

  • inline: Use 'inline' as the default Content Dispostion value for embedded images (db32c93)
  • tests: Removed Node v12 from test matrix as it is not compatible with the test framework anymore (7fe0a60)
• 6.9.5 - 2023-09-06
  

  6.9.5 (2023-09-06)

  Bug Fixes

  • license: Updated license year (da4744e)
• 6.9.4 - 2023-07-19
• 6.9.3 - 2023-05-29
• 6.9.2 - 2023-05-11
• 6.9.1 - 2023-01-27
• 6.9.0 - 2023-01-12
• 6.8.0 - 2022-09-28
• 6.7.8 - 2022-08-11
• 6.7.7 - 2022-07-06
• 6.7.6 - 2022-06-30
• 6.7.5 - 2022-05-04
• 6.7.4 - 2022-04-28
• 6.7.3 - 2022-03-21
• 6.7.2 - 2021-11-26
• 6.7.1 - 2021-11-15
• 6.7.0 - 2021-10-11
• 6.6.5 - 2021-09-23
• 6.6.4 - 2021-09-23
• 6.6.3 - 2021-07-14
• 6.6.2 - 2021-06-18
• 6.6.1 - 2021-05-23
• 6.6.0 - 2021-04-28
• 6.5.0 - 2021-02-26
• 6.4.18 - 2021-02-11
• 6.4.17 - 2020-12-11
• 6.4.16 - 2020-11-12
• 6.4.15 - 2020-11-06
• 6.4.14 - 2020-10-14
• 6.4.13 - 2020-10-02
• 6.4.12 - 2020-09-30
• 6.4.11 - 2020-07-29
• 6.4.10 - 2020-06-17
• 6.4.8 - 2020-05-28
• 6.4.7 - 2020-05-28
• 6.4.6 - 2020-03-20

from nodemailer GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs