diff --git a/package-lock.json b/package-lock.json
index b4c4f36..a0eccdf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -675,9 +675,9 @@
       "integrity": "sha512-iyam8fBuCUpWeKPGpaNMetEocMt364qkCsfL9JuhjXX6dRnguRVOfk2GZaDpPjcOKiiXCPINZC1GczQ7iTq3Zw=="
     },
     "nodemailer": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.1.tgz",
-      "integrity": "sha512-j0BsSyaMlyadEDEypK/F+xlne2K5m6wzPYMXS/yxKI0s7jmT1kBx6GEKRVbZmyYfKOsjkeC/TiMVDJBI/w5gMQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "oauth": {
       "version": "0.9.15",
diff --git a/package.json b/package.json
index 4ce365f..861953e 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "http-errors": "~1.6.3",
     "mongoose": "^5.7.9",
     "morgan": "~1.9.1",
-    "nodemailer": "^6.3.1",
+    "nodemailer": "^6.4.16",
     "ot": "git+https://github.com/Operational-Transformation/ot.js.git",
     "passport": "^0.4.0",
     "passport-facebook": "^3.0.0",