diff --git a/api/package-lock.json b/api/package-lock.json
index 44c9f6a..24561ac 100644
--- a/api/package-lock.json
+++ b/api/package-lock.json
@@ -13,7 +13,7 @@
         "better-sqlite3": "^12.2.0",
         "express": "^5.1.0",
         "express-session": "^1.18.2",
-        "nodemailer": "^7.0.5",
+        "nodemailer": "^7.0.11",
         "zod": "^4.0.14"
       },
       "devDependencies": {
@@ -1734,9 +1734,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "7.0.5",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.5.tgz",
-      "integrity": "sha512-nsrh2lO3j4GkLLXoeEksAMgAOqxOv6QumNRVQTJwKH4nuiww6iC2y7GyANs9kRAxCexg3+lTWM3PZ91iLlVjfg==",
+      "version": "7.0.11",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.11.tgz",
+      "integrity": "sha512-gnXhNRE0FNhD7wPSCGhdNh46Hs6nm+uTyg+Kq0cZukNQiYdnCsoQjodNP9BQVG9XrcK/v6/MgpAPBUFyzh9pvw==",
       "license": "MIT-0",
       "engines": {
         "node": ">=6.0.0"
diff --git a/api/package.json b/api/package.json
index 376357d..9509c4e 100644
--- a/api/package.json
+++ b/api/package.json
@@ -28,7 +28,7 @@
     "better-sqlite3": "^12.2.0",
     "express": "^5.1.0",
     "express-session": "^1.18.2",
-    "nodemailer": "^7.0.5",
+    "nodemailer": "^7.0.11",
     "zod": "^4.0.14"
   }
 }