diff --git a/lib/package-lock.json b/lib/package-lock.json
index 9c04cfdd6..083877030 100644
--- a/lib/package-lock.json
+++ b/lib/package-lock.json
@@ -12,7 +12,7 @@
         "@connectrpc/connect": "^2.0.2",
         "@connectrpc/connect-web": "^2.0.2",
         "buffer-crc32": "^1.0.0",
-        "jose": "6.0.8",
+        "jose": "6.2.2",
         "json-canonicalize": "^1.0.6",
         "uuid": "~13.0.0"
       },
@@ -7243,9 +7243,9 @@
       "license": "MIT"
     },
     "node_modules/jose": {
-      "version": "6.0.8",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.0.8.tgz",
-      "integrity": "sha512-EyUPtOKyTYq+iMOszO42eobQllaIjJnwkZ2U93aJzNyPibCy7CEvT9UQnaCVB51IAd49gbNdCew1c0LcLTCB2g==",
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.2.tgz",
+      "integrity": "sha512-d7kPDd34KO/YnzaDOlikGpOurfF0ByC2sEV4cANCtdqLlTfBlw2p14O/5d/zv40gJPbIQxfES3nSx1/oYNyuZQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/lib/package.json b/lib/package.json
index 39927c760..45c4cda7e 100644
--- a/lib/package.json
+++ b/lib/package.json
@@ -91,7 +91,7 @@
     "@connectrpc/connect": "^2.0.2",
     "@connectrpc/connect-web": "^2.0.2",
     "buffer-crc32": "^1.0.0",
-    "jose": "6.0.8",
+    "jose": "6.2.2",
     "json-canonicalize": "^1.0.6",
     "uuid": "~13.0.0"
   },