diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d702e77..536d6a3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -70,8 +70,8 @@ importers:
         specifier: ^3.12.0
         version: 3.23.1(@types/node@26.1.1)
       nodemailer:
-        specifier: ^9.0.1
-        version: 9.0.3
+        specifier: ^10.0.9
+        version: 10.0.13
       qrcode:
         specifier: ^1.5.4
         version: 1.5.4
@@ -920,9 +920,9 @@ packages:
     resolution: {integrity: sha512-wRNIrw4DmVLKQlbgOMdkMx27Wrpzes2hh5Jtbi2bjPd+4wJstWIqP5A+lscnqbm0xxmT5Bpg8Lec5ItEBwx6BQ==}
     engines: {node: '>=18'}
 
-  nodemailer@9.0.3:
-    resolution: {integrity: sha512-n+YP+NKwR5zRWa60k3GiQ6Q3B4KXCoAw40dAKeCtYn020iNN74aWK2liXIC3ZEATeGql7we3tE3t8QwhY0eskw==}
-    engines: {node: '>=6.0.0'}
+  nodemailer@10.0.13:
+    resolution: {integrity: sha512-SzG86OlvcW/NNhUFC6uROMwRTL4n7MswfQqC/T8mhkmnY1YVa23zUEMYi4ijSeXSl9GLz9ZeTJDUatEDuY5FeQ==}
+    engines: {node: '>=20.0.0'}
 
   object-inspect@1.13.4:
     resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
@@ -1943,7 +1943,7 @@ snapshots:
 
   node-releases@2.0.51: {}
 
-  nodemailer@9.0.3: {}
+  nodemailer@10.0.13: {}
 
   object-inspect@1.13.4: {}
 
diff --git a/server/package.json b/server/package.json
index 6a8acb2..c0e7506 100644
--- a/server/package.json
+++ b/server/package.json
@@ -20,7 +20,7 @@
     "helmet": "^8.0.0",
     "jsonwebtoken": "^9.0.2",
     "mysql2": "^3.12.0",
-    "nodemailer": "^9.0.1",
+    "nodemailer": "^10.0.9",
     "qrcode": "^1.5.4"
   }
 }