mailparser 3.9.10 → 3.9.12

package/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "3.9.10"
+    ".": "3.9.12"
 }

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [3.9.12](https://github.com/nodemailer/mailparser/compare/v3.9.11...v3.9.12) (2026-06-25)
+
+
+### Bug Fixes
+
+* decode iso-8859-8-i and iso-8859-8-e charsets as iso-8859-8 ([3e4b7fc](https://github.com/nodemailer/mailparser/commit/3e4b7fc00429a85f6b4c41da13deaf5be3087eed))
+
+## [3.9.11](https://github.com/nodemailer/mailparser/compare/v3.9.10...v3.9.11) (2026-06-19)
+
+
+### Bug Fixes
+
+* bump nodemailer to 9.0.1 ([020f140](https://github.com/nodemailer/mailparser/commit/020f140e67e98ac65c1d56d48c838986f7decc8a))
+
 ## [3.9.10](https://github.com/nodemailer/mailparser/compare/v3.9.9...v3.9.10) (2026-06-15)
 
 

package/SECURITY.md

@@ -36,8 +36,9 @@ Report privately through one of the following channels:
 1. **GitHub Security Advisories (preferred).** Open a private report at
    <https://github.com/nodemailer/mailparser/security/advisories/new>. This keeps
    the discussion private until a fix is published and lets us credit you.
-2. **Email.** Send details to **andris@postalsys.com**. Encrypt sensitive
-   details if possible.
+2. **Email.** Send details to **andris@postalsys.com** (the contact listed in
+   [`SECURITY.txt`](SECURITY.txt)). Encrypt sensitive details if possible - our
+   PGP key fingerprint is `5D952A46E1D8C931F6364E01DC6C83F4D584D364`.
 
 When reporting, please include as much of the following as you can:
 

package/SECURITY.txt

@@ -0,0 +1,27 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Contact: https://github.com/nodemailer/mailparser/security/advisories/new
+Contact: mailto:andris@postalsys.com
+Expires: 2027-06-01T00:00:00.000Z
+Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5D952A46E1D8C931F6364E01DC6C83F4D584D364
+Preferred-Languages: en, et
+Canonical: https://github.com/nodemailer/mailparser/blob/master/SECURITY.txt
+Policy: https://github.com/nodemailer/mailparser/blob/master/SECURITY.md
+-----BEGIN PGP SIGNATURE-----
+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+=4L6c
+-----END PGP SIGNATURE-----

package/lib/mail-parser.js

@@ -200,13 +200,16 @@ class MailParser extends Transform {
             // create wrapper
             return {
                 decodeStream(charset) {
+                    // node-iconv resolves its own charset aliases and needs charset-specific
+                    // fixups (see IconvDecoder, eg. ks_c_5601-1987), so pass the charset through as is
                     return new IconvDecoder(Iconv, charset);
                 }
             };
         } else {
             return {
                 decodeStream(charset) {
-                    charset = (charset || 'ascii').toString().trim().toLowerCase();
+                    // resolve charset aliases (eg. iso-8859-8-i -> ISO-8859-8) via libmime's canonical table
+                    charset = libmime.normalizeCharset((charset || 'ascii').toString());
                     if (/^jis|^iso-?2022-?jp|^EUCJP/i.test(charset)) {
                         // special case not supported by iconv-lite
                         return new JPDecoder(charset);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mailparser",
-    "version": "3.9.10",
+    "version": "3.9.12",
     "description": "Parse e-mails",
     "main": "index.js",
     "scripts": {
@@ -22,10 +22,10 @@
         "he": "1.2.0",
         "html-to-text": "10.0.0",
         "iconv-lite": "0.7.2",
-        "libmime": "5.3.8",
+        "libmime": "5.4.0",
         "linkify-it": "5.0.1",
-        "@zone-eu/mailsplit": "5.4.12",
-        "nodemailer": "9.0.0",
+        "@zone-eu/mailsplit": "5.4.13",
+        "nodemailer": "9.0.1",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
     },