[Snyk] Security upgrade smtp-server from 3.10.0 to 3.13.2
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this Merge Request
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEMAILER-6219989 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: smtp-server
The new version differs by 27 commits.- 42347b1 Merge pull request #205 from nodemailer/release-please--branches--master--components--smtp-server
- 4052bcd chore(master): release 3.13.2 [skip-ci]
- 69de435 Merge branch 'master' of github.com:nodemailer/smtp-server
- 5876626 fix(release): fixed Git URL on package.json
- b3a9cce Merge pull request #204 from nodemailer/release-please--branches--master--components--smtp-server
- a09bb95 chore(master): release 3.13.1 [skip-ci]
- 438c617 fix(deps): use punycode module
- 0dbc8e1 fix(deploy): added autorelease
- d4e1cfd Merge pull request #200 from immjs/patch-1
- 72db181 Do not impose an unauthenticated command limit when auth is optional
- ce14fcc v3.13.0
- 83be6b2 Merge pull request #189 from piboistudios/secure-socket-interception
- 657ac6e fix #193
- 0ba0080 v3.12.0
- db4da83 Updated test matrix
- fa33a1b bumped deps
- e0f3e64 feat: add ability to customize auth required error message
- b430b5f use setImmediate
- be82c59 Add secure interceptor
- 5a995d4 expose servername in session
- 96c0bee v3.11.0
- 2bd0975 renamed .closed to .isClosed
- a2e765f Merge pull request #176 from zackschuster/master
- 3a217ad lib: conditionally set stream's closed property
Check the changes in this Merge Request to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 
🧐 View latest project report
Learn how to fix vulnerabilities with free interactive lessons: