diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
index 953c2a39a94..5abf7d2757c 100644
--- a/apps/hash-api/package.json
+++ b/apps/hash-api/package.json
@@ -101,7 +101,7 @@
     "md5": "2.3.0",
     "mime-types": "2.1.35",
     "nanoid": "3.3.11",
-    "nodemailer": "8.0.5",
+    "nodemailer": "9.0.1",
     "oembed-providers": "1.0.20250926",
     "openai": "6.6.0",
     "sanitize-html": "2.17.4",