diff --git a/backend/server.js b/backend/server.js
index 51387fd..499cc37 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -23,9 +23,9 @@ app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend
 app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html')));
 
 // ==========================================
-// VULNERÁVEL (OWASP ZAP)
+// VULNERÁVEL (OWASP ZAP) / SonarQube
 // ==========================================
-/*app.get('/api/search', (req, res) => {
+app.get('/api/search', (req, res) => {
     const termo = req.query.q || '';
     // A vulnerabilidade crítica: devolver o input diretamente no HTML
     res.send(`
@@ -37,7 +37,7 @@ app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend
             </body>
         </html>
     `);
-});*/
+});
 
 // Configuração do transporte de E-mail (Mocks de teste vs Produção)
 let transporter;
diff --git a/package-lock.json b/package-lock.json
index 0c659ad..fc94e4c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,8 +11,7 @@
       "dependencies": {
         "cors": "^2.8.5",
         "express": "^4.18.2",
-        "lodash": "4.17.15",
-        "nodemailer": "^8.0.11"
+        "lodash": "4.17.15"
       },
       "devDependencies": {
         "jest": "^30.4.2",
@@ -4123,15 +4122,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/nodemailer": {
-      "version": "8.0.11",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-8.0.11.tgz",
-      "integrity": "sha512-nrO/pDAUKl+wXX+lx16tDLbnm0fW6sK/x8mgohaCpg+CdCEl482bD4tCuAZk2DyliruiNTIZxRCoWkDqJEnAiA==",
-      "license": "MIT-0",
-      "engines": {
-        "node": ">=6.0.0"
-      }
-    },
     "node_modules/normalize-path": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
diff --git a/package.json b/package.json
index f98ae6d..7b3ac35 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,6 @@
   "dependencies": {
     "cors": "^2.8.5",
     "express": "^4.18.2",
-    "nodemailer": "^8.0.11",
     "lodash": "4.17.15"
   },
   "devDependencies": {