diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 7d4bd6ab9c7a1..591c1d3c5592e 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1289,14 +1289,9 @@
             <sha256 value="544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="com.sun.mail" name="jakarta.mail" version="1.6.3">
-         <artifact name="jakarta.mail-1.6.3.jar">
-            <sha256 value="018ffd5684fd758157886933cc74116996d7f5757cc6f104bb43a647a3815f8a" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
-      <component group="com.sun.mail" name="jakarta.mail" version="1.6.4">
-         <artifact name="jakarta.mail-1.6.4.jar">
-            <sha256 value="65d4c18e15ea2b9eb129098ae92db4cf996d85179f30ac34f7d4db856ffaa3f9" origin="Generated by Gradle"/>
+      <component group="com.sun.mail" name="jakarta.mail" version="1.6.8">
+         <artifact name="jakarta.mail-1.6.8.jar">
+            <sha256 value="c83f1a1ed580a35878957de7367071be27026d02d34ace6267d0c3da23e193c2" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="com.sun.xml.bind" name="jaxb-impl" version="2.2.3-1">
diff --git a/x-pack/plugin/security/build.gradle b/x-pack/plugin/security/build.gradle
index 987e489fbf09f..450039e2958b1 100644
--- a/x-pack/plugin/security/build.gradle
+++ b/x-pack/plugin/security/build.gradle
@@ -90,7 +90,7 @@ dependencies {
     api "com.nimbusds:nimbus-jose-jwt:10.0.2"
   }
   api "com.nimbusds:lang-tag:1.7"
-  api "com.sun.mail:jakarta.mail:1.6.3"
+  api "com.sun.mail:jakarta.mail:1.6.8"
   api "net.jcip:jcip-annotations:1.0"
   api "net.minidev:json-smart:2.5.2"
   api "net.minidev:accessors-smart:2.5.2"
diff --git a/x-pack/plugin/watcher/build.gradle b/x-pack/plugin/watcher/build.gradle
index ce7c8e5d6311a..f541ca4be58c5 100644
--- a/x-pack/plugin/watcher/build.gradle
+++ b/x-pack/plugin/watcher/build.gradle
@@ -34,7 +34,7 @@ dependencies {
   api 'com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20211018.2'
   runtimeOnly 'com.google.guava:guava:32.0.1-jre' // needed by watcher for the html sanitizer
   runtimeOnly 'com.google.guava:failureaccess:1.0.1'
-  api 'com.sun.mail:jakarta.mail:1.6.4'
+  api 'com.sun.mail:jakarta.mail:1.6.8'
   api 'com.sun.activation:jakarta.activation:1.2.1'
   compileOnly "org.apache.httpcomponents:httpclient:${versions.httpclient}"
   compileOnly "org.apache.httpcomponents:httpcore:${versions.httpcore}"