diff --git a/package.json b/package.json
index 2f3026328..06671fd29 100644
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
     "lucide-react": "^1.59.0",
     "mmdb-lib": "^3.0.3",
     "next": "16.3.8",
-    "nodemailer": "10.1.2",
+    "nodemailer": "10.1.7",
     "otpauth": "^9.5.2",
     "p-limit": "^7.3.3",
     "pg": "^8.23.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3d648306e..6cee5a51f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -127,8 +127,8 @@ importers:
         specifier: 16.3.8
         version: 16.3.8(@babel/core@7.29.7(supports-color@7.2.0))(@opentelemetry/api@1.9.1)(@playwright/test@1.64.1)(@types/node@26.6.5)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)
       nodemailer:
-        specifier: 10.1.2
-        version: 10.1.2
+        specifier: 10.1.7
+        version: 10.1.7
       otpauth:
         specifier: ^9.5.2
         version: 9.5.2
@@ -5698,8 +5698,8 @@ packages:
     resolution: {integrity: sha512-BdiKAgbfRlvfMq/XzO/AF9NPmaA8a+YpLAyAFTVFBj3gARrAIfWvNq7Q7NE4se3KgFu0KkrvQMxTS0XVnsGzHg==}
     engines: {node: '>=18'}
 
-  nodemailer@10.1.2:
-    resolution: {integrity: sha512-rnQn9Rzh8RAwcp42MVsIvxbsv6YZ2a2/av+uyJ/LPU1+2QSlrRgFsWWZTKenyRUqkIl8urOI0c4+CEcmFdsvQw==}
+  nodemailer@10.1.7:
+    resolution: {integrity: sha512-OQa6FDln5fLttmqSbjDiRYvFDOFNrBqfiOwHPlEbURil3b+vPB1v8xpi+Sp46drzNDlsTnNsS502vthmz56r4w==}
     engines: {node: '>=20.0.0'}
 
   non-error@0.1.0:
@@ -12883,7 +12883,7 @@ snapshots:
 
   node-releases@2.0.58: {}
 
-  nodemailer@10.1.2: {}
+  nodemailer@10.1.7: {}
 
   non-error@0.1.0: {}