nodemailer - npm Package Compare versions

Comparing version 9.0.0 to 9.0.1

CHANGELOG.md

 # CHANGELOG
 
+## [9.0.1](https://github.com/nodemailer/nodemailer/compare/v9.0.0...v9.0.1) (2026-06-17)
+
+
+### Bug Fixes
+
+* enforce disableFileAccess/disableUrlAccess for raw message option ([a82e060](https://github.com/nodemailer/nodemailer/commit/a82e060d978f27e5f41369a9a9807b1e3dedc2e2))
+
 ## [9.0.0](https://github.com/nodemailer/nodemailer/compare/v8.0.11...v9.0.0) (2026-06-14)
@@ -4,0 +11,0 @@

lib/mail-composer/index.js

@@ -35,3 +35,7 @@ /* eslint no-undefined: 0 */
         if (this.mail.raw) {
-            this.message = new MimeNode('message/rfc822', { newline: this.mail.newline }).setRaw(this.mail.raw);
+            this.message = new MimeNode('message/rfc822', {
+                newline: this.mail.newline,
+                disableUrlAccess: this.mail.disableUrlAccess,
+                disableFileAccess: this.mail.disableFileAccess
+            }).setRaw(this.mail.raw);
         } else if (this._useMixed) {
@@ -38,0 +42,0 @@ this.message = this._createMixed();

package.json

 {
     "name": "nodemailer",
-    "version": "9.0.0",
+    "version": "9.0.1",
     "description": "Easy as cake e-mail sending from your Node.js applications",
@@ -30,6 +30,6 @@ "main": "lib/nodemailer.js",
     "devDependencies": {
-        "@aws-sdk/client-sesv2": "3.1065.0",
+        "@aws-sdk/client-sesv2": "3.1068.0",
         "bunyan": "1.8.15",
         "c8": "11.0.0",
-        "eslint": "10.4.1",
+        "eslint": "10.5.0",
         "eslint-config-prettier": "10.1.8",
@@ -43,3 +43,3 @@ "globals": "17.6.0",
         "proxy-test-server": "1.0.0",
-        "smtp-server": "3.18.5"
+        "smtp-server": "3.19.0"
     },
@@ -46,0 +46,0 @@ "engines": {

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

567393

0.08%

Lines of code

12980

0.03%

No dependency changes