diff --git a/functions/package-lock.json b/functions/package-lock.json
index a810b43..908bfad 100644
--- a/functions/package-lock.json
+++ b/functions/package-lock.json
@@ -1830,9 +1830,9 @@
       "integrity": "sha512-sol30LUpz1jQFBjOKwbjxijiE3b6pjd74YwfD0fJOKPjF+fONKb2Yg8rYgS6+bK6VDl+/wfr4IYpC7jDzLUIfw=="
     },
     "nodemailer": {
-      "version": "6.4.11",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.11.tgz",
-      "integrity": "sha512-BVZBDi+aJV4O38rxsUh164Dk1NCqgh6Cm0rQSb9SK/DHGll/DrCMnycVDD7msJgZCnmVa8ASo8EZzR7jsgTukQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "object-assign": {
       "version": "4.1.1",
diff --git a/functions/package.json b/functions/package.json
index cded56b..4130dcd 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -18,7 +18,7 @@
     "rfdc": "^1.1.4",
     "stream-to-string": "^1.2.0",
     "@google-cloud/secret-manager": "^3.1.0",
-    "nodemailer": "^6.4.11"
+    "nodemailer": "^6.4.16"
   },
   "devDependencies": {
     "firebase-functions-test": "^0.2.0"