diff --git a/package.json b/package.json
index 33aaaeb..e1e7aaa 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
         "mongo-seeding": "^3.4.0-alpha.1",
         "mongoose": "^5.9.1",
         "mongoose-auto-number": "^2.0.0",
-        "nodemailer": "^6.4.2",
+        "nodemailer": "^6.4.16",
         "passport": "^0.4.1",
         "passport-facebook": "^3.0.0",
         "socket.io": "^2.4.0"
diff --git a/yarn.lock b/yarn.lock
index 0255ff9..ed666c8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2932,10 +2932,10 @@ node-releases@^1.1.49:
   dependencies:
     semver "^6.3.0"
 
-nodemailer@^6.4.2:
-  version "6.4.2"
-  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.4.2.tgz#7147550e32cdc37453380ab78d2074533966090a"
-  integrity sha512-g0n4nH1ONGvqYo1v72uSWvF/MRNnnq1LzmSzXb/6EPF3LFb51akOhgG3K2+aETAsJx90/Q5eFNTntu4vBCwyQQ==
+nodemailer@^6.4.16:
+  version "6.4.16"
+  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.4.16.tgz#5cb6391b1d79ab7eff32d6f9f48366b5a7117293"
+  integrity sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ==
 
 nodemon@^2.0.2:
   version "2.0.2"