diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6e9f6bca67e..3ed8a36286a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -463,8 +463,8 @@ importers:
         specifier: ^11.0.8
         version: 11.0.8
       nodemailer:
-        specifier: ^10.3.1
-        version: 10.3.1
+        specifier: ^10.4.0
+        version: 10.4.0
       oidc-provider:
         specifier: 9.13.3
         version: 9.13.3(supports-color@8.1.1)
@@ -4550,8 +4550,8 @@ packages:
   nodeify@1.0.1:
     resolution: {integrity: sha512-n7C2NyEze8GCo/z73KdbjRsBiLbv6eBn1FxwYKQ23IqGo7pQY3mhQan61Sv7eEDJCiyUjTVrVkXTzJCo1dW7Aw==}
 
-  nodemailer@10.3.1:
-    resolution: {integrity: sha512-uF0AFsJC07Y1vdW7p580DKAnh7rAO+4UPSSB3mDCPNDufoiaOebV6JmrzpxB14OjEEEiBsNdYoM2Y+fN8M7BBA==}
+  nodemailer@10.4.0:
+    resolution: {integrity: sha512-fyy6r4Q5euRJ9Qr3Cts9K7SZrfe9zmz9oLOYiAR02MEJRDRci+99y0OoYBYBgpLffOqkkjXrB/d26VfiMje/kA==}
     engines: {node: '>=20.0.0'}
 
   object-assign@4.1.1:
@@ -10031,7 +10031,7 @@ snapshots:
       is-promise: 1.0.1
       promise: 1.3.0
 
-  nodemailer@10.3.1: {}
+  nodemailer@10.4.0: {}
 
   object-assign@4.1.1: {}
 
diff --git a/src/package.json b/src/package.json
index dc78a8ab76c..da577f0d5e9 100644
--- a/src/package.json
+++ b/src/package.json
@@ -65,7 +65,7 @@
     "mssql": "^12.7.14",
     "mysql2": "^3.24.6",
     "nano": "^11.0.8",
-    "nodemailer": "^10.3.1",
+    "nodemailer": "^10.4.0",
     "oidc-provider": "9.13.3",
     "openapi-backend": "^5.23.0",
     "pdfkit": "^0.20.2",