diff --git a/floods-backend/package.json b/floods-backend/package.json
index dc16c3f5..1666baf2 100644
--- a/floods-backend/package.json
+++ b/floods-backend/package.json
@@ -29,7 +29,7 @@
     "lokka": "^1.7.0",
     "lokka-transport-http": "^1.6.1",
     "moment": "^2.22.2",
-    "nodemailer": "^4.6.3",
+    "nodemailer": "^6.4.16",
     "pg-format": "^1.0.4",
     "pg-minify": "^0.4.2",
     "postgraphile": "^4.2.0",
diff --git a/floods-backend/yarn.lock b/floods-backend/yarn.lock
index d00c85e7..4c9e862d 100644
--- a/floods-backend/yarn.lock
+++ b/floods-backend/yarn.lock
@@ -4599,10 +4599,10 @@ node-pre-gyp@^0.10.0:
     semver "^5.3.0"
     tar "^4"
 
-nodemailer@^4.6.3:
-  version "4.6.8"
-  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-4.6.8.tgz#f82fb407828bf2e76d92acc34b823d83e774f89c"
-  integrity sha512-A3s7EM/426OBIZbLHXq2KkgvmKbn2Xga4m4G+ZUA4IaZvG8PcZXrFh+2E4VaS2o+emhuUVRnzKN2YmpkXQ9qwA==
+nodemailer@^6.4.16:
+  version "6.4.16"
+  resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.4.16.tgz#5cb6391b1d79ab7eff32d6f9f48366b5a7117293"
+  integrity sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ==
 
 nopt@^4.0.1:
   version "4.0.1"