diff --git a/package-lock.json b/package-lock.json
index a86a212..a969828 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8518,9 +8518,9 @@
       "integrity": "sha512-Xsmf94D/DdeDISAECUaxXVxhh+kHdbOQE4CnP4igo3HXL3BSmmUpD5M7orH434EZZwBTFF2xe5SgsQr/wOBuNw=="
     },
     "nodemailer": {
-      "version": "6.4.2",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.2.tgz",
-      "integrity": "sha512-g0n4nH1ONGvqYo1v72uSWvF/MRNnnq1LzmSzXb/6EPF3LFb51akOhgG3K2+aETAsJx90/Q5eFNTntu4vBCwyQQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "nopt": {
       "version": "4.0.1",
diff --git a/package.json b/package.json
index 58a85f1..d4b16d5 100644
--- a/package.json
+++ b/package.json
@@ -44,7 +44,7 @@
     "koa-json-error": "^3.1.2",
     "lodash": "^4.17.15",
     "mysql2": "^2.0.2",
-    "nodemailer": "^6.4.2",
+    "nodemailer": "^6.4.16",
     "qiniu": "^7.2.2",
     "uuid": "^3.3.3"
   },