Merge pull request #883 from telefonicaid/dependabot/npm_and_yarn/nodemailer-8.0.4

AlvaroVega · web-flow · commit 6c801689e989 · 2026-03-27T13:58:24.000+01:00
Bump nodemailer from 7.0.11 to 8.0.4
diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
@@ -1,2 +1,3 @@
 - Upgrade: express dependency from 4.21.2 to 4.22.1
 - Upgrade: markdown dependency from 3.3.4 to 3.8.1
+- Upgrade: nodemailer dependency from from 7.0.11 to 8.0.4 (solving vulnerability CVE-2026-4539)
diff --git a/package.json b/package.json
@@ -67,7 +67,7 @@
     "logops": "2.1.2",
     "mongodb": "4.17.2",
     "ngsijs": "1.4.1",
-    "nodemailer": "7.0.11",
+    "nodemailer": "8.0.4",
     "nodemailer-smtp-transport": "~2.7.2",
     "request": "2.88.2",
     "nanoid": "3.3.8",

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`- Upgrade: express dependency from 4.21.2 to 4.22.1`
`2`	`2`	`- Upgrade: markdown dependency from 3.3.4 to 3.8.1`
	`3`	`+- Upgrade: nodemailer dependency from from 7.0.11 to 8.0.4 (solving vulnerability CVE-2026-4539)`