diff --git a/package-lock.json b/package-lock.json
index f5dea9d48..bec3f4956 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14605,10 +14605,9 @@
       "license": "MIT"
     },
     "node_modules/nodemailer": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.3.tgz",
-      "integrity": "sha512-Ajq6Sz1x7cIK3pN6KesGTah+1gnwMnx5gKl3piQlQQE/PwyJ4Mbc8is2psWYxK3RJTVeqsDaCv8ZzXLCDHMTZw==",
-      "license": "MIT-0",
+      "version": "7.0.4",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.4.tgz",
+      "integrity": "sha512-9O00Vh89/Ld2EcVCqJ/etd7u20UhME0f/NToPfArwPEe1Don1zy4mAIz6ariRr7mJ2RDxtaDzN0WJVdVXPtZaw==",
       "engines": {
         "node": ">=6.0.0"
       }
@@ -18963,7 +18962,7 @@
     },
     "services/backend": {
       "name": "@deploystack/backend",
-      "version": "0.20.6",
+      "version": "0.20.7",
       "dependencies": {
         "@fastify/cookie": "^11.0.2",
         "@fastify/cors": "^11.0.1",
@@ -18978,7 +18977,7 @@
         "fastify": "^5.4.0",
         "fastify-favicon": "^5.0.0",
         "lucia": "^3.2.2",
-        "nodemailer": "^7.0.3",
+        "nodemailer": "^7.0.4",
         "pino": "^9.7.0",
         "pino-pretty": "^13.0.0",
         "pug": "^3.0.2",
diff --git a/services/backend/package.json b/services/backend/package.json
index dae901be6..360c4a5e8 100644
--- a/services/backend/package.json
+++ b/services/backend/package.json
@@ -30,7 +30,7 @@
     "fastify": "^5.4.0",
     "fastify-favicon": "^5.0.0",
     "lucia": "^3.2.2",
-    "nodemailer": "^7.0.3",
+    "nodemailer": "^7.0.4",
     "pino": "^9.7.0",
     "pino-pretty": "^13.0.0",
     "pug": "^3.0.2",