diff --git a/package-lock.json b/package-lock.json
index 7020dd3f3..32ddc51b3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15578,13 +15578,13 @@
       "license": "MIT"
     },
     "node_modules/smtp-server": {
-      "version": "3.19.21",
-      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.21.tgz",
-      "integrity": "sha512-d0wWijB5dK4gImQidwWMlcGsycqcDCJV0VdQbfz61rgkDqnzAx0Epvi0o5JN2nnr/YwriVC+XV0T8YgcoB0bng==",
+      "version": "3.19.23",
+      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.23.tgz",
+      "integrity": "sha512-t6AOBe7RR9Y/9Kox4e5SIm7wS2ZA8P0VuhVEZ5Yiox0WyevX+rMjATzIwEX3A+B6SGwnJ8QvoHtJAhbJYbjy3A==",
       "license": "MIT-0",
       "dependencies": {
         "ipv6-normalize": "1.0.1",
-        "nodemailer": "10.1.0",
+        "nodemailer": "10.1.2",
         "punycode.js": "2.3.1"
       },
       "engines": {
@@ -15592,9 +15592,9 @@
       }
     },
     "node_modules/smtp-server/node_modules/nodemailer": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.1.0.tgz",
-      "integrity": "sha512-fXW8AulB25aOTuwfRYV6lqHyfz2VM4rr4SGXH03mE7x5znEUpzL5mu6anARUpZN7744Ziwkmr4AxSLPJsBQspg==",
+      "version": "10.1.2",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.1.2.tgz",
+      "integrity": "sha512-rnQn9Rzh8RAwcp42MVsIvxbsv6YZ2a2/av+uyJ/LPU1+2QSlrRgFsWWZTKenyRUqkIl8urOI0c4+CEcmFdsvQw==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
@@ -17712,7 +17712,7 @@
         "postal-mime": "^3.0.1",
         "replicate": "^1.0.0",
         "sharp": "^0.35.5",
-        "smtp-server": "^3.19.21",
+        "smtp-server": "^3.19.23",
         "socket.io": "^4.8.4",
         "svg-captcha": "^1.4.0",
         "together-ai": "^0.33.0",
diff --git a/src/backend/package.json b/src/backend/package.json
index 964167e3e..8975ce199 100644
--- a/src/backend/package.json
+++ b/src/backend/package.json
@@ -60,7 +60,7 @@
     "postal-mime": "^3.0.1",
     "replicate": "^1.0.0",
     "sharp": "^0.35.5",
-    "smtp-server": "^3.19.21",
+    "smtp-server": "^3.19.23",
     "socket.io": "^4.8.4",
     "svg-captcha": "^1.4.0",
     "together-ai": "^0.33.0",