diff --git a/backend/package.json b/backend/package.json
index 3ac144e0fb15..0c96c63f7fdd 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -45,7 +45,7 @@
     "mjml": "4.15.0",
     "mongodb": "6.3.0",
     "mustache": "4.2.0",
-    "nodemailer": "8.0.5",
+    "nodemailer": "8.0.9",
     "object-hash": "3.0.0",
     "prom-client": "15.1.3",
     "rate-limiter-flexible": "5.0.3",
@@ -69,7 +69,7 @@
     "@types/mjml": "4.7.4",
     "@types/mustache": "4.2.2",
     "@types/node": "24.9.1",
-    "@types/nodemailer": "6.4.15",
+    "@types/nodemailer": "8.0.0",
     "@types/object-hash": "3.0.6",
     "@types/readline-sync": "1.4.8",
     "@types/string-similarity": "4.0.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fcff95bbd8cd..dd5cc76d6402 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -153,8 +153,8 @@ importers:
         specifier: 4.2.0
         version: 4.2.0
       nodemailer:
-        specifier: 8.0.5
-        version: 8.0.5
+        specifier: 8.0.9
+        version: 8.0.9
       object-hash:
         specifier: 3.0.0
         version: 3.0.0
@@ -220,8 +220,8 @@ importers:
         specifier: 24.9.1
         version: 24.9.1
       '@types/nodemailer':
-        specifier: 6.4.15
-        version: 6.4.15
+        specifier: 8.0.0
+        version: 8.0.0
       '@types/object-hash':
         specifier: 3.0.6
         version: 3.0.6
@@ -4869,8 +4869,8 @@ packages:
   '@types/node@24.9.1':
     resolution: {integrity: sha512-QoiaXANRkSXK6p0Duvt56W208du4P9Uye9hWLWgGMDTEoKPhuenzNcC4vGUmrNkiOKTlIrBoyNQYNpSwfEZXSg==}
 
-  '@types/nodemailer@6.4.15':
-    resolution: {integrity: sha512-0EBJxawVNjPkng1zm2vopRctuWVCxk34JcIlRuXSf54habUWdz1FB7wHDqOqvDa8Mtpt0Q3LTXQkAs2LNyK5jQ==}
+  '@types/nodemailer@8.0.0':
+    resolution: {integrity: sha512-fyf8jWULsCo0d0BuoQ75i6IeoHs47qcqxWc7yUdUcV0pOZGjUTTOvwdG1PRXUDqN/8A64yQdQdnA2pZgcdi+cA==}
 
   '@types/normalize-package-data@2.4.4':
     resolution: {integrity: sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==}
@@ -9109,8 +9109,8 @@ packages:
     resolution: {integrity: sha512-1uiY543L+N7Og4yswvlm5NCKgPKDEXd9AUR9Jh3gen6oOeBsesr6LqhXom1er3eRzSUcVRWXzhv8tSNrIfGHKw==}
     engines: {node: '>=18'}
 
-  nodemailer@8.0.5:
-    resolution: {integrity: sha512-0PF8Yb1yZuQfQbq+5/pZJrtF6WQcjTd5/S4JOHs9PGFxuTqoB/icwuB44pOdURHJbRKX1PPoJZtY7R4VUoCC8w==}
+  nodemailer@8.0.9:
+    resolution: {integrity: sha512-5ofa7BUN8+C+Hckh5V2GjeeOGRQBx0CJQA6KxrvuZfC8iU4/q7sLn8XrtEEhJkjV6HdyIiQs7Bba6bTao8JhkA==}
     engines: {node: '>=6.0.0'}
 
   nodemon@3.1.14:
@@ -16031,7 +16031,7 @@ snapshots:
     dependencies:
       undici-types: 7.16.0
 
-  '@types/nodemailer@6.4.15':
+  '@types/nodemailer@8.0.0':
     dependencies:
       '@types/node': 24.9.1
 
@@ -21152,7 +21152,7 @@ snapshots:
     dependencies:
       '@babel/parser': 7.29.2
 
-  nodemailer@8.0.5: {}
+  nodemailer@8.0.9: {}
 
   nodemon@3.1.14:
     dependencies: