diff --git a/package-lock.json b/package-lock.json
index f8f66d4389..8298ce6253 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
         "html-to-text": "^10.0.1",
         "json-stable-stringify": "^1.3.0",
         "jsonwebtoken": "^9.0.3",
-        "mailparser": "^3.9.28",
+        "mailparser": "^3.9.35",
         "marked": "^18.0.13",
         "nodemailer": "^9.0.6",
         "rfc2047": "^4.0.1"
@@ -30,7 +30,7 @@
         "@types/html-to-text": "^9.0.4",
         "@types/imap-simple": "^4.2.10",
         "@types/jsonwebtoken": "^9.0.10",
-        "@types/mailparser": "^3.4.6",
+        "@types/mailparser": "^3.9.0",
         "@types/node": "^26.6.2",
         "@types/nodemailer": "^8.0.1",
         "@types/rfc2047": "^2.0.3",
@@ -1286,9 +1286,9 @@
       }
     },
     "node_modules/@types/mailparser": {
-      "version": "3.4.6",
-      "resolved": "https://registry.npmjs.org/@types/mailparser/-/mailparser-3.4.6.tgz",
-      "integrity": "sha512-wVV3cnIKzxTffaPH8iRnddX1zahbYB1ZEoAxyhoBo3TBCBuK6nZ8M8JYO/RhsCuuBVOw/DEN/t/ENbruwlxn6Q==",
+      "version": "3.9.0",
+      "resolved": "https://registry.npmjs.org/@types/mailparser/-/mailparser-3.9.0.tgz",
+      "integrity": "sha512-YnhrRiRVDiEAphFvd72hKa1n8y2b9Q3rgSQiONZQyhQz67h5g4MZHNApET3XWXVEFdInWtHqDHKEwnyjxU3QVw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2028,14 +2028,14 @@
       }
     },
     "node_modules/@zone-eu/mailsplit": {
-      "version": "5.4.17",
-      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.17.tgz",
-      "integrity": "sha512-LOMzdrKRVgaghLaezIPdHRhsGpfDiWNQo1RptWc84CRllI4dWLwqX/L4x1iTt1CaeyvyUfMXM/6mjIsEisT3Tg==",
+      "version": "5.4.20",
+      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.20.tgz",
+      "integrity": "sha512-6B2w0zRBWOwbO5h7SL5N/2z1AuNchTP3OT33MObUr4/cz9bWPrZ6KadLKxnSrOZG0AGu7Q03p4X7eQhZHc1u/A==",
       "license": "(MIT OR EUPL-1.1+)",
       "dependencies": {
-        "libbase64": "1.3.0",
-        "libmime": "5.4.4",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.2",
+        "libmime": "5.4.7",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/acorn": {
@@ -3077,10 +3077,15 @@
       }
     },
     "node_modules/he": {
-      "version": "1.2.0",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/he/-/he-2.0.0.tgz",
+      "integrity": "sha512-0jE+JPv08nhXWmI1dULybzqNt34RbkH6Ul6V4cmDONpjYx1SfyObKF38FJLaJ1K7WWD93LWL9lewzk4E1Ria4A==",
       "license": "MIT",
       "bin": {
-        "he": "bin/he"
+        "he": "bin/he.mjs"
+      },
+      "engines": {
+        "node": ">=22"
       }
     },
     "node_modules/html-entities": {
@@ -3353,21 +3358,21 @@
       }
     },
     "node_modules/libbase64": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.0.tgz",
-      "integrity": "sha512-GgOXd0Eo6phYgh0DJtjQ2tO8dc0IVINtZJeARPeiIJqge+HdsWSuaDTe8ztQ7j/cONByDZ3zeB325AHiv5O0dg==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.2.tgz",
+      "integrity": "sha512-fFCoI0ceXhTu/0QiJ6Uf6BV9k7X/8QW2/D4BR1vw3BPrHcIjLbGLH+U7inQ4SeWrfNCOmpGE09Qt4XjSFfus0g==",
       "license": "MIT"
     },
     "node_modules/libmime": {
-      "version": "5.4.4",
-      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.4.tgz",
-      "integrity": "sha512-d3zZ2k8s6iO+8u9Vfkl6HfhD5lSVocGcmOViTz/i0CJcwhJADyubEJ/+TkBhuLDUSIBOiG+D8G5kJKwXwKbXXA==",
+      "version": "5.4.7",
+      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.7.tgz",
+      "integrity": "sha512-r1ENu4wMVSB52AAORwaW4L/MeQJr9rryzHLRpcjud3zcUPWXh1Xkgn+tAqL8oTnRO/LW7y5xxPBE20ta5amtMA==",
       "license": "MIT",
       "dependencies": {
         "encoding-japanese": "2.4.0",
         "iconv-lite": "0.7.3",
-        "libbase64": "1.3.0",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.2",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/libmime/node_modules/iconv-lite": {
@@ -3387,9 +3392,9 @@
       }
     },
     "node_modules/libqp": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.1.tgz",
-      "integrity": "sha512-0Wd+GPz1O134cP62YU2GTOPNA7Qgl09XwCqM5zpBv87ERCXdfDtyKXvV7c9U22yWJh44QZqBocFnXN11K96qow==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.2.tgz",
+      "integrity": "sha512-rp+U80tl9Os4K7GnVbPzPRmghPu6eqB8rcF+ontvNAnoga0JhMFG/bkTD/reC8yoznKMgOc5/ttZHJasiWeFPw==",
       "license": "MIT"
     },
     "node_modules/lightningcss": {
@@ -3749,19 +3754,19 @@
       }
     },
     "node_modules/mailparser": {
-      "version": "3.9.28",
-      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.28.tgz",
-      "integrity": "sha512-O7oCYzWW9YH5lHk/y3Z8R8dFnUq8wqaH146BuU2NDt/3MGjdfMLzGF2Ft7WksTCeq00covNKpwxQabcG3zJFqQ==",
+      "version": "3.9.35",
+      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.35.tgz",
+      "integrity": "sha512-ID/TGNz3oHa+2iKJ4Y9Q4tNar2gorQYLOXnf7uTeq1ZQltaB8YGP/H84fKNh/t1mpZ7bRzB0e0WAiX7Y31A3Vw==",
       "license": "MIT",
       "dependencies": {
-        "@zone-eu/mailsplit": "5.4.17",
+        "@zone-eu/mailsplit": "5.4.20",
         "encoding-japanese": "2.4.0",
-        "he": "1.2.0",
+        "he": "2.0.0",
         "html-to-text": "10.0.1",
         "iconv-lite": "0.7.3",
-        "libmime": "5.4.4",
+        "libmime": "5.4.7",
         "linkify-it": "5.0.2",
-        "nodemailer": "10.0.10",
+        "nodemailer": "10.0.14",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
       },
@@ -3786,9 +3791,9 @@
       }
     },
     "node_modules/mailparser/node_modules/nodemailer": {
-      "version": "10.0.10",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.10.tgz",
-      "integrity": "sha512-He9XskOFms62SyAKkLu8CcGcYHAo+BSHSsORI8s4PJH8qZgZY4L4lDfvyN0twvmbpyG+eGrxpyBlskj9d9rJ8A==",
+      "version": "10.0.14",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.14.tgz",
+      "integrity": "sha512-eJoLFKg55fesSlzUekmfOv/SBXh4KUYT8oiQc2RLP0tfG0rbNMJBK7wgHJwXTJwqyKlSJMz9UzDZ4v+aHEvo8g==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
diff --git a/package.json b/package.json
index 6398092dd8..b92d81d622 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
     "@types/html-to-text": "^9.0.4",
     "@types/imap-simple": "^4.2.10",
     "@types/jsonwebtoken": "^9.0.10",
-    "@types/mailparser": "^3.4.6",
+    "@types/mailparser": "^3.9.0",
     "@types/node": "^26.6.2",
     "@types/nodemailer": "^8.0.1",
     "@types/rfc2047": "^2.0.3",
@@ -65,7 +65,7 @@
     "html-to-text": "^10.0.1",
     "json-stable-stringify": "^1.3.0",
     "jsonwebtoken": "^9.0.3",
-    "mailparser": "^3.9.28",
+    "mailparser": "^3.9.35",
     "marked": "^18.0.13",
     "nodemailer": "^9.0.6",
     "rfc2047": "^4.0.1"