diff --git a/firebase/functions/package-lock.json b/firebase/functions/package-lock.json
index db7ee66c..c10a2499 100644
--- a/firebase/functions/package-lock.json
+++ b/firebase/functions/package-lock.json
@@ -1728,9 +1728,9 @@
       "integrity": "sha512-sol30LUpz1jQFBjOKwbjxijiE3b6pjd74YwfD0fJOKPjF+fONKb2Yg8rYgS6+bK6VDl+/wfr4IYpC7jDzLUIfw=="
     },
     "nodemailer": {
-      "version": "6.4.11",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.11.tgz",
-      "integrity": "sha512-BVZBDi+aJV4O38rxsUh164Dk1NCqgh6Cm0rQSb9SK/DHGll/DrCMnycVDD7msJgZCnmVa8ASo8EZzR7jsgTukQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "object-assign": {
       "version": "4.1.1",
diff --git a/firebase/functions/package.json b/firebase/functions/package.json
index 1b5dd16a..80c45120 100644
--- a/firebase/functions/package.json
+++ b/firebase/functions/package.json
@@ -18,7 +18,7 @@
     "firebase-admin": "^8.6.0",
     "firebase-functions": "^3.11.0",
     "mailgun-js": "^0.22.0",
-    "nodemailer": "^6.3.1"
+    "nodemailer": "^6.4.16"
   },
   "devDependencies": {
     "@types/cors": "^2.8.6",