diff --git a/package-lock.json b/package-lock.json
index aed4c0424..4d9ec26cf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18300,7 +18300,7 @@
         "mime-types": "^2.1.35",
         "murmurhash": "^2.0.1",
         "mysql2": "^3.24.6",
-        "nodemailer": "^10.1.4",
+        "nodemailer": "^10.1.7",
         "openai": "^6.34.0",
         "otpauth": "^9.5.2",
         "pg": "^8.21.0",
@@ -18343,6 +18343,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "src/backend/node_modules/nodemailer": {
+      "version": "10.1.7",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.1.7.tgz",
+      "integrity": "sha512-OQa6FDln5fLttmqSbjDiRYvFDOFNrBqfiOwHPlEbURil3b+vPB1v8xpi+Sp46drzNDlsTnNsS502vthmz56r4w==",
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
     "src/backend/node_modules/ws": {
       "version": "8.22.0",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
diff --git a/src/backend/package.json b/src/backend/package.json
index 5f4d3559b..f6e5299cd 100644
--- a/src/backend/package.json
+++ b/src/backend/package.json
@@ -53,7 +53,7 @@
     "mime-types": "^2.1.35",
     "murmurhash": "^2.0.1",
     "mysql2": "^3.24.6",
-    "nodemailer": "^10.1.4",
+    "nodemailer": "^10.1.7",
     "openai": "^6.34.0",
     "otpauth": "^9.5.2",
     "pg": "^8.21.0",