diff --git a/package-lock.json b/package-lock.json
index be00355..f7bb5ec 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2200,9 +2200,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.1.tgz",
-      "integrity": "sha512-j0BsSyaMlyadEDEypK/F+xlne2K5m6wzPYMXS/yxKI0s7jmT1kBx6GEKRVbZmyYfKOsjkeC/TiMVDJBI/w5gMQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "nopt": {
       "version": "4.0.1",
diff --git a/package.json b/package.json
index f1984f3..b14a0ae 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "firebase": "^7.5.0",
     "grpc": "^1.24.2",
     "nexmo": "^2.5.1",
-    "nodemailer": "^6.3.1",
+    "nodemailer": "^6.4.16",
     "xoauth2": "^1.2.0"
   },
   "devDependencies": {