diff --git a/package-lock.json b/package-lock.json
index 91a2d48..4cbfd9d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -28,7 +28,7 @@
         "i18next-fs-backend": "^1.0.6",
         "i18next-http-middleware": "^2.1.2",
         "jsonwebtoken": "^8.5.1",
-        "nodemailer": "^6.3.1",
+        "nodemailer": "^6.4.16",
         "nunjucks": "^3.2.2",
         "pg": "^8.5.1",
         "postgraphile": "^4.10.0",
@@ -1208,7 +1208,6 @@
         "anymatch": "^2.0.0",
         "async-each": "^1.0.1",
         "braces": "^2.3.2",
-        "fsevents": "^1.2.7",
         "glob-parent": "^3.1.0",
         "inherits": "^2.0.3",
         "is-binary-path": "^1.0.0",
@@ -5901,7 +5900,6 @@
       "dependencies": {
         "anymatch": "~3.1.1",
         "braces": "~3.0.2",
-        "fsevents": "~2.3.1",
         "glob-parent": "~5.1.0",
         "is-binary-path": "~2.1.0",
         "is-glob": "~4.0.1",
@@ -6371,9 +6369,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.1.tgz",
-      "integrity": "sha512-j0BsSyaMlyadEDEypK/F+xlne2K5m6wzPYMXS/yxKI0s7jmT1kBx6GEKRVbZmyYfKOsjkeC/TiMVDJBI/w5gMQ==",
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ==",
       "engines": {
         "node": ">=6.0.0"
       }
@@ -6489,7 +6487,6 @@
       "dependencies": {
         "a-sync-waterfall": "^1.0.0",
         "asap": "^2.0.3",
-        "chokidar": "^3.3.0",
         "commander": "^5.1.0"
       },
       "bin": {
@@ -15221,9 +15218,9 @@
       }
     },
     "nodemailer": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.3.1.tgz",
-      "integrity": "sha512-j0BsSyaMlyadEDEypK/F+xlne2K5m6wzPYMXS/yxKI0s7jmT1kBx6GEKRVbZmyYfKOsjkeC/TiMVDJBI/w5gMQ=="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "nodemon": {
       "version": "1.19.4",
diff --git a/package.json b/package.json
index d3f4888..38c6af7 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "i18next-fs-backend": "^1.0.6",
     "i18next-http-middleware": "^2.1.2",
     "jsonwebtoken": "^8.5.1",
-    "nodemailer": "^6.3.1",
+    "nodemailer": "^6.4.16",
     "nunjucks": "^3.2.2",
     "pg": "^8.5.1",
     "postgraphile": "^4.10.0",