diff --git a/backend/package.json b/backend/package.json
index d144ecf..cf163b5 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -22,7 +22,7 @@
     "express-rate-limit": "^7.5.0",
     "helmet": "^8.1.0",
     "jsonwebtoken": "^9.0.2",
-    "nodemailer": "^6.10.1",
+    "nodemailer": "^8.0.1",
     "react": "^18.3.1",
     "zod": "^3.24.4"
   },
diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf
index 31150f4..8dd203e 100644
--- a/docker/nginx/default.conf
+++ b/docker/nginx/default.conf
@@ -11,6 +11,7 @@ server {
     listen 80;
     listen [::]:80;
     server_name _;
+    server_tokens off;
 
     # Security headers (X-Frame-Options, HSTS, X-Content-Type-Options set by Caddy)
     add_header X-XSS-Protection "0" always;