diff --git a/functions/package-lock.json b/functions/package-lock.json
index 667b316..e092acb 100644
--- a/functions/package-lock.json
+++ b/functions/package-lock.json
@@ -2045,9 +2045,9 @@
       "integrity": "sha512-8Df0906+tq/omxuCZD6PqhPaQDYuyJ1d+VITgxoIA8zvQd1ru+nMJcDChHH324MWitIgbVkAkQoGEEVJNpn/PA=="
     },
     "nodemailer": {
-      "version": "6.2.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.2.1.tgz",
-      "integrity": "sha512-TagB7iuIi9uyNgHExo8lUDq3VK5/B0BpbkcjIgNvxbtVrjNqq0DwAOTuzALPVkK76kMhTSzIgHqg8X1uklVs6g=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "number-is-nan": {
       "version": "1.0.1",
diff --git a/functions/package.json b/functions/package.json
index c1fb7a3..bd1f598 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -14,7 +14,7 @@
   "dependencies": {
     "firebase-admin": "~7.0.0",
     "firebase-functions": "^2.3.0",
-    "nodemailer": "^6.2.1"
+    "nodemailer": "^6.4.16"
   },
   "devDependencies": {
     "firebase-functions-test": "^0.1.6"