diff --git a/functions/package-lock.json b/functions/package-lock.json
index 2a5eaab..553521d 100644
--- a/functions/package-lock.json
+++ b/functions/package-lock.json
@@ -1982,9 +1982,9 @@
       "integrity": "sha512-8Df0906+tq/omxuCZD6PqhPaQDYuyJ1d+VITgxoIA8zvQd1ru+nMJcDChHH324MWitIgbVkAkQoGEEVJNpn/PA=="
     },
     "nodemailer": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.0.tgz",
-      "integrity": "sha512-TEHBNBPHv7Ie/0o3HXnb7xrPSSQmH1dXwQKRaMKDBGt/ZN54lvDVujP6hKkO/vjkIYL9rK8kHSG11+G42Nhxuw=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "object-assign": {
       "version": "4.1.1",
diff --git a/functions/package.json b/functions/package.json
index e822e34..2cce66e 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -18,7 +18,7 @@
     "firebase-functions": "^3.1.0",
     "fuse.js": "^3.4.5",
     "luxon": "^1.17.2",
-    "nodemailer": "^6.3.0"
+    "nodemailer": "^6.4.16"
   },
   "devDependencies": {
     "eslint": "^5.12.0",