diff --git a/package.json b/package.json
index 0c15046..86c4e2b 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
     "@oada/certs": "^4.1.1",
     "eventemitter2": "^6.4.5",
     "is-wsl": "^2.2.0",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "jwt-bearer-client-auth": "^2.0.1",
     "oauth-dyn-reg": "^2.1.1",
     "open": "^8.4.0",
diff --git a/yarn.lock b/yarn.lock
index 1091dd8..c278579 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -540,7 +540,7 @@ __metadata:
     events: ^3.3.0
     express: ^4.17.3
     is-wsl: ^2.2.0
-    jsonwebtoken: ^8.5.1
+    jsonwebtoken: ^9.0.0
     jwt-bearer-client-auth: ^2.0.1
     karma: ^6.3.18
     karma-browserify: ^8.1.0
@@ -5764,6 +5764,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"jsonwebtoken@npm:^9.0.0":
+  version: 9.0.0
+  resolution: "jsonwebtoken@npm:9.0.0"
+  dependencies:
+    jws: ^3.2.2
+    lodash: ^4.17.21
+    ms: ^2.1.1
+    semver: ^7.3.8
+  checksum: b9181cecf9df99f1dc0253f91ba000a1aa4d91f5816d1608c0dba61a5623726a0bfe200b51df25de18c1a6000825d231ad7ce2788aa54fd48dcb760ad9eb9514
+  languageName: node
+  linkType: hard
+
 "just-extend@npm:^4.0.2":
   version: 4.1.1
   resolution: "just-extend@npm:4.1.1"
@@ -8029,6 +8041,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"semver@npm:^7.3.8":
+  version: 7.3.8
+  resolution: "semver@npm:7.3.8"
+  dependencies:
+    lru-cache: ^6.0.0
+  bin:
+    semver: bin/semver.js
+  checksum: ba9c7cbbf2b7884696523450a61fee1a09930d888b7a8d7579025ad93d459b2d1949ee5bbfeb188b2be5f4ac163544c5e98491ad6152df34154feebc2cc337c1
+  languageName: node
+  linkType: hard
+
 "send@npm:0.17.2":
   version: 0.17.2
   resolution: "send@npm:0.17.2"