diff --git a/packages/connectors/connector-smtp/package.json b/packages/connectors/connector-smtp/package.json
index f1d643554..c5a94271d 100644
--- a/packages/connectors/connector-smtp/package.json
+++ b/packages/connectors/connector-smtp/package.json
@@ -5,7 +5,7 @@
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "dependencies": {
     "@logto/connector-kit": "workspace:^2.1.0",
-    "nodemailer": "^6.9.1"
+    "nodemailer": "^6.9.9"
   },
   "devDependencies": {
     "@types/nodemailer": "^6.4.7"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 195d92d7b..28cd1069d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2439,8 +2439,8 @@ importers:
         specifier: ^14.0.0
         version: 14.0.0
       nodemailer:
-        specifier: ^6.9.1
-        version: 6.9.1
+        specifier: ^6.9.9
+        version: 6.9.9
       snakecase-keys:
         specifier: ^6.0.0
         version: 6.0.0
@@ -17373,8 +17373,8 @@ packages:
     resolution: {integrity: sha512-71UV2HRUP+djvHpdyatiuv+Y1o8hI4ZI7bMfuuoACMLR1JJCErM4WXAclNeHd6BgHXkqeqnnAk3wpDkSQWmFXw==}
     dev: false
 
-  /nodemailer@6.9.1:
-    resolution: {integrity: sha512-qHw7dOiU5UKNnQpXktdgQ1d3OFgRAekuvbJLcdG5dnEo/GtcTHRYM7+UfJARdOFU9WUQO8OiIamgWPmiSFHYAA==}
+  /nodemailer@6.9.9:
+    resolution: {integrity: sha512-dexTll8zqQoVJEZPwQAKzxxtFn0qTnjdQTchoU6Re9BUUGBJiOy3YMn/0ShTW6J5M0dfQ1NeDeRTTl4oIWgQMA==}
     engines: {node: '>=6.0.0'}
     dev: false