3.19.23 (2026-10-16) Bug Fixes bump nodemailer to 10.1.2 (aedb210) close the STARTTLS plaintext injection race, honour client certificate options on implicit TLS and bound what a client may send (ed5c14b)