diff --git a/examples/ms-teams-connect-example/package.json b/examples/ms-teams-connect-example/package.json
index 6cb460c73..6e2772903 100644
--- a/examples/ms-teams-connect-example/package.json
+++ b/examples/ms-teams-connect-example/package.json
@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@knocklabs/react": "0.11.21",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "next": "15.3.6",
     "react": "^19.2.5",
     "react-dom": "^19.2.5"
diff --git a/examples/slack-connect-example/package.json b/examples/slack-connect-example/package.json
index 19bb370d4..f0b77a2cd 100644
--- a/examples/slack-connect-example/package.json
+++ b/examples/slack-connect-example/package.json
@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@knocklabs/react": "0.11.21",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "next": "15.3.6",
     "react": "^19.2.5",
     "react-dom": "^19.2.5"
diff --git a/examples/slack-kit-example/package.json b/examples/slack-kit-example/package.json
index 14f8bd0a0..dac094cbc 100644
--- a/examples/slack-kit-example/package.json
+++ b/examples/slack-kit-example/package.json
@@ -13,7 +13,7 @@
   "dependencies": {
     "@knocklabs/node": "^1.30.0",
     "@knocklabs/react": "0.11.21",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "next": "15.3.6",
     "react": "^19.2.5",
     "react-dom": "^19.2.5"
diff --git a/packages/client/package.json b/packages/client/package.json
index 4d4a29360..33b96201d 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -59,7 +59,7 @@
     "cross-env": "^7.0.3",
     "crypto": "^1.0.1",
     "eslint": "^8.56.0",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "prettier": "^3.5.3",
     "rimraf": "^6.0.1",
     "rollup": "^4.46.2",
diff --git a/yarn.lock b/yarn.lock
index 73cdb7de7..ae7593585 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4456,7 +4456,7 @@ __metadata:
     crypto: "npm:^1.0.1"
     eslint: "npm:^8.56.0"
     eventemitter2: "npm:^6.4.5"
-    jsonwebtoken: "npm:^9.0.2"
+    jsonwebtoken: "npm:^9.0.3"
     jwt-decode: "npm:^4.0.0"
     nanoid: "npm:^3.3.11"
     phoenix: "npm:1.8.5"
@@ -15371,11 +15371,11 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jsonwebtoken@npm:^9.0.2":
-  version: 9.0.2
-  resolution: "jsonwebtoken@npm:9.0.2"
+"jsonwebtoken@npm:^9.0.3":
+  version: 9.0.3
+  resolution: "jsonwebtoken@npm:9.0.3"
   dependencies:
-    jws: "npm:^3.2.2"
+    jws: "npm:^4.0.1"
     lodash.includes: "npm:^4.3.0"
     lodash.isboolean: "npm:^3.0.3"
     lodash.isinteger: "npm:^4.0.4"
@@ -15385,7 +15385,7 @@ __metadata:
     lodash.once: "npm:^4.0.0"
     ms: "npm:^2.1.1"
     semver: "npm:^7.5.4"
-  checksum: 10c0/d287a29814895e866db2e5a0209ce730cbc158441a0e5a70d5e940eb0d28ab7498c6bf45029cc8b479639bca94056e9a7f254e2cdb92a2f5750c7f358657a131
+  checksum: 10c0/6ca7f1e54886ea3bde7146a5a22b53847c46e25453c7f7307a69818b9a6ad48c390b2e59d5690fcfd03c529b01960060cc4bb0c686991d6edae2285dfd30f4ba
   languageName: node
   linkType: hard
 
@@ -15401,24 +15401,24 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jwa@npm:^1.4.1":
-  version: 1.4.2
-  resolution: "jwa@npm:1.4.2"
+"jwa@npm:^2.0.1":
+  version: 2.0.1
+  resolution: "jwa@npm:2.0.1"
   dependencies:
     buffer-equal-constant-time: "npm:^1.0.1"
     ecdsa-sig-formatter: "npm:1.0.11"
     safe-buffer: "npm:^5.0.1"
-  checksum: 10c0/210a544a42ca22203e8fc538835205155ba3af6a027753109f9258bdead33086bac3c25295af48ac1981f87f9c5f941bc8f70303670f54ea7dcaafb53993d92c
+  checksum: 10c0/ab3ebc6598e10dc11419d4ed675c9ca714a387481466b10e8a6f3f65d8d9c9237e2826f2505280a739cf4cbcf511cb288eeec22b5c9c63286fc5a2e4f97e78cf
   languageName: node
   linkType: hard
 
-"jws@npm:^3.2.2":
-  version: 3.2.2
-  resolution: "jws@npm:3.2.2"
+"jws@npm:^4.0.1":
+  version: 4.0.1
+  resolution: "jws@npm:4.0.1"
   dependencies:
-    jwa: "npm:^1.4.1"
+    jwa: "npm:^2.0.1"
     safe-buffer: "npm:^5.0.1"
-  checksum: 10c0/e770704533d92df358adad7d1261fdecad4d7b66fa153ba80d047e03ca0f1f73007ce5ed3fbc04d2eba09ba6e7e6e645f351e08e5ab51614df1b0aa4f384dfff
+  checksum: 10c0/6be1ed93023aef570ccc5ea8d162b065840f3ef12f0d1bb3114cade844de7a357d5dc558201d9a65101e70885a6fa56b17462f520e6b0d426195510618a154d0
   languageName: node
   linkType: hard
 
@@ -17106,7 +17106,7 @@ __metadata:
     "@types/react-dom": "npm:^19.1.6"
     eslint: "npm:^8.56.0"
     eslint-config-next: "npm:15.4.6"
-    jsonwebtoken: "npm:^9.0.2"
+    jsonwebtoken: "npm:^9.0.3"
     next: "npm:15.3.6"
     react: "npm:^19.2.5"
     react-dom: "npm:^19.2.5"
@@ -19970,7 +19970,7 @@ __metadata:
     "@types/react-dom": "npm:^19.1.6"
     eslint: "npm:^8.56.0"
     eslint-config-next: "npm:15.4.6"
-    jsonwebtoken: "npm:^9.0.2"
+    jsonwebtoken: "npm:^9.0.3"
     next: "npm:15.3.6"
     react: "npm:^19.2.5"
     react-dom: "npm:^19.2.5"
@@ -19990,7 +19990,7 @@ __metadata:
     "@types/react-dom": "npm:^19.1.6"
     eslint: "npm:^8.56.0"
     eslint-config-next: "npm:15.4.6"
-    jsonwebtoken: "npm:^9.0.2"
+    jsonwebtoken: "npm:^9.0.3"
     next: "npm:15.3.6"
     postcss: "npm:^8"
     react: "npm:^19.2.5"