diff --git a/package-lock.json b/package-lock.json
index 22df695f2e..e18d95afb0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
         "html-to-text": "^10.0.1",
         "json-stable-stringify": "^1.3.0",
         "jsonwebtoken": "^9.0.3",
-        "mailparser": "^3.9.22",
+        "mailparser": "^3.9.26",
         "marked": "^18.0.11",
         "nodemailer": "^9.0.6",
         "rfc2047": "^4.0.1"
@@ -3742,9 +3742,9 @@
       }
     },
     "node_modules/mailparser": {
-      "version": "3.9.22",
-      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.22.tgz",
-      "integrity": "sha512-+c/vp1ewxXoaE/6Nj0W40xOYBsSslfa2PPJSoGJLurtS+gXPRPufRbAzJ6i4PfxX71U+cSHmy9bzbMKA/0+Kzg==",
+      "version": "3.9.26",
+      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.26.tgz",
+      "integrity": "sha512-YUdylKj8RnSoyavscy2Kl3ZTh9l0k4PC/KEpW6M/IwTnicKwR/fMLaVXshlF8MfRg1p4HTsW+TVER6YaIeKnow==",
       "license": "MIT",
       "dependencies": {
         "@zone-eu/mailsplit": "5.4.16",
@@ -3754,7 +3754,7 @@
         "iconv-lite": "0.7.3",
         "libmime": "5.4.3",
         "linkify-it": "5.0.2",
-        "nodemailer": "10.0.0",
+        "nodemailer": "10.0.9",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
       },
@@ -3779,9 +3779,9 @@
       }
     },
     "node_modules/mailparser/node_modules/nodemailer": {
-      "version": "10.0.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.0.tgz",
-      "integrity": "sha512-wdv+hXBg0iIPIOf108FaZyTxqjQpCvQeAJt9pHHTooPy/y3vQtI9eiImM9AIVKR3e/0FeMA1oueNfBjFJcaK+Q==",
+      "version": "10.0.9",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.9.tgz",
+      "integrity": "sha512-BF0qcyplCwp+jMk6HCjFykBz/YhhZSsxrARhOldLwFWH+8kGjQsd2WIMIZhqEuyXRoGFi0ONbDeWDMDoL8MhLw==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
diff --git a/package.json b/package.json
index 0ce95960b6..aa374f184a 100644
--- a/package.json
+++ b/package.json
@@ -65,7 +65,7 @@
     "html-to-text": "^10.0.1",
     "json-stable-stringify": "^1.3.0",
     "jsonwebtoken": "^9.0.3",
-    "mailparser": "^3.9.22",
+    "mailparser": "^3.9.26",
     "marked": "^18.0.11",
     "nodemailer": "^9.0.6",
     "rfc2047": "^4.0.1"