diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cbf06af55..18c06ed7a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -180,8 +180,8 @@ importers:
         specifier: ^2.0.0
         version: 2.0.0
       jose:
-        specifier: ^6.0.12
-        version: 6.0.12
+        specifier: ^6.0.13
+        version: 6.0.13
       js-cookie:
         specifier: ^3.0.5
         version: 3.0.5
@@ -3580,8 +3580,8 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  jose@6.0.12:
-    resolution: {integrity: sha512-T8xypXs8CpmiIi78k0E+Lk7T2zlK4zDyg+o1CZ4AkOHgDg98ogdP2BeZ61lTFKFyoEwJ9RgAgN+SdM3iPgNonQ==}
+  jose@6.0.13:
+    resolution: {integrity: sha512-Yms4GpbmdANamS51kKK6w4hRlKx8KTxbWyAAKT/MhUMtqbIqh5mb2HjhTNUbk7TFL8/MBB5zWSDohL7ed4k/UA==}
 
   js-cookie@3.0.5:
     resolution: {integrity: sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==}
@@ -8435,7 +8435,7 @@ snapshots:
       filelist: 1.0.4
       minimatch: 3.1.2
 
-  jose@6.0.12: {}
+  jose@6.0.13: {}
 
   js-cookie@3.0.5: {}
 
@@ -8893,7 +8893,7 @@ snapshots:
       '@koa/router': 13.1.1
       debug: 4.4.1(supports-color@8.1.1)
       eta: 3.5.0
-      jose: 6.0.12
+      jose: 6.0.13
       jsesc: 3.1.0
       koa: 3.0.0
       nanoid: 5.1.5
diff --git a/src/package.json b/src/package.json
index 5c9bce403..9a616a306 100644
--- a/src/package.json
+++ b/src/package.json
@@ -43,7 +43,7 @@
     "find-root": "1.1.0",
     "formidable": "^3.5.4",
     "http-errors": "^2.0.0",
-    "jose": "^6.0.12",
+    "jose": "^6.0.13",
     "js-cookie": "^3.0.5",
     "jsdom": "^26.1.0",
     "jsonminify": "0.4.2",