diff --git a/package-lock.json b/package-lock.json
index 44e369cb84d..16b8b621a7b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -91,7 +91,7 @@
 				"ioredis": "^5.3.2",
 				"jose": "^5.6.3",
 				"jsdom": "^23.2.0",
-				"jsonwebtoken": "^9.0.0",
+				"jsonwebtoken": "^9.0.2",
 				"jwks-rsa": "^2.0.5",
 				"ldapjs": "git://github.com/hpi-schul-cloud/node-ldapjs.git",
 				"lodash": "^4.17.19",
@@ -2591,26 +2591,6 @@
 				"@types/node": "*"
 			}
 		},
-		"node_modules/@feathersjs/authentication/node_modules/jsonwebtoken": {
-			"version": "9.0.2",
-			"license": "MIT",
-			"dependencies": {
-				"jws": "^3.2.2",
-				"lodash.includes": "^4.3.0",
-				"lodash.isboolean": "^3.0.3",
-				"lodash.isinteger": "^4.0.4",
-				"lodash.isnumber": "^3.0.3",
-				"lodash.isplainobject": "^4.0.6",
-				"lodash.isstring": "^4.0.1",
-				"lodash.once": "^4.0.0",
-				"ms": "^2.1.1",
-				"semver": "^7.5.4"
-			},
-			"engines": {
-				"node": ">=12",
-				"npm": ">=6"
-			}
-		},
 		"node_modules/@feathersjs/authentication/node_modules/typescript": {
 			"version": "5.3.2",
 			"license": "Apache-2.0",
@@ -4815,6 +4795,21 @@
 				"@nestjs/common": "^8.0.0 || ^9.0.0 || ^10.0.0"
 			}
 		},
+		"node_modules/@nestjs/jwt/node_modules/jsonwebtoken": {
+			"version": "9.0.0",
+			"resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.0.tgz",
+			"integrity": "sha512-tuGfYXxkQGDPnLJ7SibiQgVgeDgfbPq2k2ICcbgqW8WxWLBAxKQM/ZCu/IT8SOSwmaYl4dpTFCW5xZv7YbbWUw==",
+			"dependencies": {
+				"jws": "^3.2.2",
+				"lodash": "^4.17.21",
+				"ms": "^2.1.1",
+				"semver": "^7.3.8"
+			},
+			"engines": {
+				"node": ">=12",
+				"npm": ">=6"
+			}
+		},
 		"node_modules/@nestjs/mapped-types": {
 			"version": "2.0.2",
 			"license": "MIT",
@@ -15258,13 +15253,20 @@
 			}
 		},
 		"node_modules/jsonwebtoken": {
-			"version": "9.0.0",
-			"license": "MIT",
+			"version": "9.0.2",
+			"resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz",
+			"integrity": "sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ==",
 			"dependencies": {
 				"jws": "^3.2.2",
-				"lodash": "^4.17.21",
+				"lodash.includes": "^4.3.0",
+				"lodash.isboolean": "^3.0.3",
+				"lodash.isinteger": "^4.0.4",
+				"lodash.isnumber": "^3.0.3",
+				"lodash.isplainobject": "^4.0.6",
+				"lodash.isstring": "^4.0.1",
+				"lodash.once": "^4.0.0",
 				"ms": "^2.1.1",
-				"semver": "^7.3.8"
+				"semver": "^7.5.4"
 			},
 			"engines": {
 				"node": ">=12",
diff --git a/package.json b/package.json
index 5a7d07f1fb4..c4a71bd6f62 100644
--- a/package.json
+++ b/package.json
@@ -207,7 +207,7 @@
 		"ioredis": "^5.3.2",
 		"jose": "^5.6.3",
 		"jsdom": "^23.2.0",
-		"jsonwebtoken": "^9.0.0",
+		"jsonwebtoken": "^9.0.2",
 		"jwks-rsa": "^2.0.5",
 		"ldapjs": "git://github.com/hpi-schul-cloud/node-ldapjs.git",
 		"lodash": "^4.17.19",