diff --git a/backend/requirements-lock.txt b/backend/requirements-lock.txt
index 015ecae..71dc147 100644
--- a/backend/requirements-lock.txt
+++ b/backend/requirements-lock.txt
@@ -303,7 +303,7 @@ pydantic-settings==2.14.2
     #   chromadb
 pygments==2.20.0
     # via rich
-pyjwt[crypto]==2.13.0
+pyjwt[crypto]==2.15.0
     # via
     #   -r requirements.txt
     #   supabase-auth
diff --git a/backend/requirements.txt b/backend/requirements.txt
index cb55651..bbd68a8 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -22,7 +22,7 @@ httpx>=0.28.1
 
 # Authentication
 supabase>=2.0.0
-PyJWT>=2.13.0
+PyJWT>=2.15.0
 
 # Production server
 gunicorn>=22.0.0