diff --git a/package-lock.json b/package-lock.json
index 96c8fe9c..cd41bf90 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4188,9 +4188,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.0.tgz",
-      "integrity": "sha512-TEHBNBPHv7Ie/0o3HXnb7xrPSSQmH1dXwQKRaMKDBGt/ZN54lvDVujP6hKkO/vjkIYL9rK8kHSG11+G42Nhxuw=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "normalize-package-data": {
       "version": "2.5.0",
diff --git a/package.json b/package.json
index b8ebd691..6084d960 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "@types/string-template": "^1.0.2",
     "azure-devops-node-api": "^10.0.0",
     "azure-pipelines-task-lib": "^2.8.0",
-    "nodemailer": "^6.3.0",
+    "nodemailer": "^6.4.16",
     "object-to-xml": "^2.0.0",
     "performance-now": "^2.1.0",
     "reflect-metadata": "^0.1.13",