fix(vulns): resolve 2 highs (#6581)

<!-- Describe the problem and your solution --> 

<!-- Issue ticket number and link (if applicable) -->

<!-- Testing instructions (skip if just adding/editing providers) -->



<!-- This is an auto-generated description by cubic. -->
<a href="https://cubic.dev/pr/NangoHQ/nango/pull/6581?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="Review in cubic"
src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a>
<!-- End of auto-generated description by cubic. -->

Author: rossmcewan

package-lock.json

@@ -15,7 +15,7 @@
         "dd-trace": "5.52.0",
         "form-data": "4.0.6",
         "mailgun.js": "13.2.0",
-        "nodemailer": "8.0.5",
+        "nodemailer": "9.0.1",
         "ws": "8.21.0"
     },
     "devDependencies": {

packages/email/package.json

@@ -139,7 +139,10 @@ publicAPI.use(
 publicAPI.use(bodyParser.raw({ type: 'text/xml', limit: bodyLimit }));
 publicAPI.use(express.urlencoded({ extended: true, limit: bodyLimit }));
 
-const upload = multer({ storage: multer.memoryStorage() });
+type ExtendedMulterLimits = multer.Options['limits'] & {
+    fieldNestingDepth?: number;
+};
+const upload = multer({ storage: multer.memoryStorage(), limits: { fieldNestingDepth: 50 } as ExtendedMulterLimits });
 
 const publicAPICorsHandler = cors({
     maxAge: 600,

packages/server/lib/routes.public.ts

@@ -56,7 +56,7 @@
         "helmet": "7.1.0",
         "jsonwebtoken": "9.0.3",
         "lodash-es": "4.18.1",
-        "multer": "2.1.1",
+        "multer": "2.2.0",
         "node-cron": "3.0.2",
         "oauth": "0.10.0",
         "passport": "0.6.0",
@@ -82,7 +82,7 @@
         "@types/he": "1.2.3",
         "@types/jsonwebtoken": "9.0.9",
         "@types/lodash-es": "4.17.12",
-        "@types/multer": "1.4.12",
+        "@types/multer": "2.1.0",
         "@types/node-cron": "3.0.11",
         "@types/nodemailer": "6.4.17",
         "@types/oauth": "0.9.1",