diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 621b8b80dea..e24d1d261a3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -463,8 +463,8 @@ importers:
         specifier: ^11.0.7
         version: 11.0.7
       nodemailer:
-        specifier: ^10.1.1
-        version: 10.1.1
+        specifier: ^10.1.6
+        version: 10.1.6
       oidc-provider:
         specifier: 9.12.2
         version: 9.12.2(supports-color@8.1.1)
@@ -4522,8 +4522,8 @@ packages:
   nodeify@1.0.1:
     resolution: {integrity: sha512-n7C2NyEze8GCo/z73KdbjRsBiLbv6eBn1FxwYKQ23IqGo7pQY3mhQan61Sv7eEDJCiyUjTVrVkXTzJCo1dW7Aw==}
 
-  nodemailer@10.1.1:
-    resolution: {integrity: sha512-pbqZRoeYUO+1E8TJ/11WeY4D2EVujj1hsYjz3qff/vUFDtGnmi7p3iqzTFslYOfQ6PnjVcWxx/CIUSHCSrO/QA==}
+  nodemailer@10.1.6:
+    resolution: {integrity: sha512-8j/UEmA4AXr51URr3Ob0h+RCBtr0NKJ76Y2P9wJT6Eu3dRyruj2ULh2e6aiKrGg8nlUj1oX6N5h8dHA82EouaQ==}
     engines: {node: '>=20.0.0'}
 
   object-assign@4.1.1:
@@ -9986,7 +9986,7 @@ snapshots:
       is-promise: 1.0.1
       promise: 1.3.0
 
-  nodemailer@10.1.1: {}
+  nodemailer@10.1.6: {}
 
   object-assign@4.1.1: {}
 
diff --git a/src/package.json b/src/package.json
index 37a6f312959..3e42fff6682 100644
--- a/src/package.json
+++ b/src/package.json
@@ -65,7 +65,7 @@
     "mssql": "^12.7.9",
     "mysql2": "^3.24.6",
     "nano": "^11.0.7",
-    "nodemailer": "^10.1.1",
+    "nodemailer": "^10.1.6",
     "oidc-provider": "9.12.2",
     "openapi-backend": "^5.21.3",
     "pdfkit": "^0.20.2",