diff --git a/CHANGES.md b/CHANGES.md
index 2fddaed27..a6aff01af 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -13,6 +13,10 @@
 - Added missing webhooks events in the console
 - Fixed a bug where single permission tag in the console was not being saved
 
+## Security
+
+- [low severity] Patch for email library (https://github.com/advisories/GHSA-f7hx-fqxw-rvvj)
+
 # Version 0.6.1 (PRE-RELEASE)
 
 ## Bug Fixes
diff --git a/composer.json b/composer.json
index f389bf442..649478435 100644
--- a/composer.json
+++ b/composer.json
@@ -50,7 +50,7 @@
         "domnikl/statsd": "2.0.*",
         "influxdb/influxdb-php": "1.15.*",
         "bacon/bacon-qr-code": "2.0.0",
-        "phpmailer/phpmailer": "6.0.7"
+        "phpmailer/phpmailer": "6.1.6"
     },
     "require-dev": {
         "appwrite/sdk-generator": "master",