diff --git a/package.json b/package.json
index 4fff68181..255c5ff6c 100644
--- a/package.json
+++ b/package.json
@@ -139,7 +139,7 @@
     "nexmo": "^2.3.2",
     "node-abort-controller": "^1.0.4",
     "node-fetch": "^2.6.7",
-    "nodemailer": "^6.4.16",
+    "nodemailer": "^6.9.9",
     "omit-deep-lodash": "^1.1.4",
     "papaparse": "^5.1.1",
     "passport": "^0.3.2",
diff --git a/yarn.lock b/yarn.lock
index c9982c3ff..3ab1eedbd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11314,10 +11314,10 @@ node-releases@^2.0.6:
   resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-2.0.6.tgz#8a7088c63a55e493845683ebf3c828d8c51c5503"
   integrity sha512-PiVXnNuFm5+iYkLBNeq5211hvO38y63T0i2KKh2KnUs3RpzJ+JtODFjkD8yjLwnDkTYF1eKXheUwdssR+NRZdg==
 
-nodemailer@^6.4.16:
-  version "6.8.0"
-  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.8.0.tgz#804bcc5256ee5523bc914506ee59f8de8f0b1cd5"
-  integrity sha512-EjYvSmHzekz6VNkNd12aUqAco+bOkRe3Of5jVhltqKhEsjw/y0PYPJfp83+s9Wzh1dspYAkUW/YNQ350NATbSQ==
+nodemailer@^6.9.9:
+  version "6.9.9"
+  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.9.9.tgz#4549bfbf710cc6addec5064dd0f19874d24248d9"
+  integrity sha512-dexTll8zqQoVJEZPwQAKzxxtFn0qTnjdQTchoU6Re9BUUGBJiOy3YMn/0ShTW6J5M0dfQ1NeDeRTTl4oIWgQMA==
 
 nodemon@^2.0.2:
   version "2.0.20"