diff --git a/api/package-lock.json b/api/package-lock.json
index 44c9f6a..d8d6415 100644
--- a/api/package-lock.json
+++ b/api/package-lock.json
@@ -13,7 +13,7 @@
         "better-sqlite3": "^12.2.0",
         "express": "^5.1.0",
         "express-session": "^1.18.2",
-        "nodemailer": "^7.0.5",
+        "nodemailer": "^7.0.7",
         "zod": "^4.0.14"
       },
       "devDependencies": {
@@ -1734,9 +1734,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "7.0.5",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.5.tgz",
-      "integrity": "sha512-nsrh2lO3j4GkLLXoeEksAMgAOqxOv6QumNRVQTJwKH4nuiww6iC2y7GyANs9kRAxCexg3+lTWM3PZ91iLlVjfg==",
+      "version": "7.0.7",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.7.tgz",
+      "integrity": "sha512-jGOaRznodf62TVzdyhKt/f1Q/c3kYynk8629sgJHpRzGZj01ezbgMMWJSAjHADcwTKxco3B68/R+KHJY2T5BaA==",
       "license": "MIT-0",
       "engines": {
         "node": ">=6.0.0"
diff --git a/api/package.json b/api/package.json
index 376357d..34c5360 100644
--- a/api/package.json
+++ b/api/package.json
@@ -28,7 +28,7 @@
     "better-sqlite3": "^12.2.0",
     "express": "^5.1.0",
     "express-session": "^1.18.2",
-    "nodemailer": "^7.0.5",
+    "nodemailer": "^7.0.7",
     "zod": "^4.0.14"
   }
 }