diff --git a/package-lock.json b/package-lock.json
index 79668d14..4e3479d2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2324,9 +2324,9 @@
       }
     },
     "nodemailer": {
-      "version": "4.6.3",
-      "resolved": "http://registry.npm.taobao.org/nodemailer/download/nodemailer-4.6.3.tgz",
-      "integrity": "sha1-w7fpf7cvRtSkdcQGoV7SOkXbzdw="
+      "version": "6.4.16",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.16.tgz",
+      "integrity": "sha512-68K0LgZ6hmZ7PVmwL78gzNdjpj5viqBdFqKrTtr9bZbJYj6BRj5W6WGkxXrEnUl3Co3CBXi3CZBUlpV/foGnOQ=="
     },
     "nopt": {
       "version": "3.0.6",
diff --git a/package.json b/package.json
index 1e3fc19a..e2461f48 100644
--- a/package.json
+++ b/package.json
@@ -62,7 +62,7 @@
     "moment": "^2.14.1",
     "morgan": "^1.7.0",
     "mysql2": "^1.3.5",
-    "nodemailer": "^4.0.1",
+    "nodemailer": "^6.4.16",
     "pug": "^2.0.1",
     "qiniu": "^7.1.3",
     "upyun": "^3.3.9",