From 6cdae8a6a60be53b9bb3eb4aed8320b3229f2262 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 9 Dec 2025 03:02:02 +0000
Subject: [PATCH] fix: 4-natours/after-section-14/package.json &
 4-natours/after-section-14/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-14157156
---
 4-natours/after-section-14/package-lock.json | 38 ++++++++++----------
 4-natours/after-section-14/package.json      |  2 +-
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/4-natours/after-section-14/package-lock.json b/4-natours/after-section-14/package-lock.json
index 3177dddaae..711d30e19a 100644
--- a/4-natours/after-section-14/package-lock.json
+++ b/4-natours/after-section-14/package-lock.json
@@ -4867,24 +4867,24 @@
           "dev": true,
           "optional": true
         },
-        "string-width": {
-          "version": "1.0.2",
+        "string_decoder": {
+          "version": "1.1.1",
           "bundled": true,
           "dev": true,
           "optional": true,
           "requires": {
-            "code-point-at": "^1.0.0",
-            "is-fullwidth-code-point": "^1.0.0",
-            "strip-ansi": "^3.0.0"
+            "safe-buffer": "~5.1.0"
           }
         },
-        "string_decoder": {
-          "version": "1.1.1",
+        "string-width": {
+          "version": "1.0.2",
           "bundled": true,
           "dev": true,
           "optional": true,
           "requires": {
-            "safe-buffer": "~5.1.0"
+            "code-point-at": "^1.0.0",
+            "is-fullwidth-code-point": "^1.0.0",
+            "strip-ansi": "^3.0.0"
           }
         },
         "strip-ansi": {
@@ -6684,9 +6684,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.1.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.1.1.tgz",
-      "integrity": "sha512-/x5MRIh56VyuuhLfcz+DL2SlBARpZpgQIf2A4Ao4hMb69MHSgDIMPwYmFwesGT1lkRDZ0eBSoym5+JoIZ3N+cQ=="
+      "version": "7.0.11",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.11.tgz",
+      "integrity": "sha512-gnXhNRE0FNhD7wPSCGhdNh46Hs6nm+uTyg+Kq0cZukNQiYdnCsoQjodNP9BQVG9XrcK/v6/MgpAPBUFyzh9pvw=="
     },
     "noop-logger": {
       "version": "0.1.1",
@@ -9042,6 +9042,14 @@
       "resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-0.1.2.tgz",
       "integrity": "sha1-gIudDlb8Jz2Am6VzOOkpkZoanxo="
     },
+    "string_decoder": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+      "requires": {
+        "safe-buffer": "~5.1.0"
+      }
+    },
     "string-width": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz",
@@ -9051,14 +9059,6 @@
         "strip-ansi": "^4.0.0"
       }
     },
-    "string_decoder": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
-      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
-      "requires": {
-        "safe-buffer": "~5.1.0"
-      }
-    },
     "strip-ansi": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
diff --git a/4-natours/after-section-14/package.json b/4-natours/after-section-14/package.json
index 0b171a086b..38983bf8d7 100644
--- a/4-natours/after-section-14/package.json
+++ b/4-natours/after-section-14/package.json
@@ -32,7 +32,7 @@
     "mongoose": "^5.5.2",
     "morgan": "^1.9.1",
     "multer": "^1.4.1",
-    "nodemailer": "^6.1.1",
+    "nodemailer": "^7.0.11",
     "pug": "^2.0.3",
     "sharp": "^0.22.1",
     "slugify": "^1.3.4",