diff --git a/api/package-lock.json b/api/package-lock.json
index b9ca46a..fce24d7 100644
--- a/api/package-lock.json
+++ b/api/package-lock.json
@@ -558,9 +558,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.1.tgz",
-      "integrity": "sha512-j0BsSyaMlyadEDEypK/F+xlne2K5m6wzPYMXS/yxKI0s7jmT1kBx6GEKRVbZmyYfKOsjkeC/TiMVDJBI/w5gMQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "on-finished": {
       "version": "2.3.0",
diff --git a/api/package.json b/api/package.json
index 6e36515..b3fd00b 100644
--- a/api/package.json
+++ b/api/package.json
@@ -21,7 +21,7 @@
     "lodash": "^4.17.15",
     "mailparser": "^2.7.1",
     "mongodb": "^3.3.0-beta2",
-    "nodemailer": "^6.3.1",
+    "nodemailer": "^6.4.16",
     "sha1": "^1.1.1",
     "text-table": "^0.2.0",
     "url-parse": "^1.4.7",