From 02af4e9b6226ead0c148f6437995e046525f30df Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 3 Dec 2025 10:00:44 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-14157156
- https://snyk.io/vuln/SNYK-JS-EXPRESS-14157151
---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 386c54d..326c512 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
         "cors": "^2.8.5",
         "csurf": "^1.11.0",
         "dotenv": "^16.5.0",
-        "express": "^5.1.0",
+        "express": "^5.2.0",
         "express-rate-limit": "^7.5.0",
         "express-slow-down": "^2.1.0",
         "helmet": "^8.1.0",
@@ -40,7 +40,7 @@
         "mysql2": "^3.14.1",
         "nanoid": "^5.1.5",
         "node-cron": "^3.0.3",
-        "nodemailer": "^6.10.1",
+        "nodemailer": "^7.0.11",
         "qrcode": "^1.5.4",
         "reflect-metadata": "^0.2.2",
         "sequelize": "^6.37.7",