diff --git a/requirements.txt b/requirements.txt
index 57abef1..7b467f5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,7 +3,7 @@ uvicorn[standard]==0.30.1
 sqlalchemy==2.0.30
 pydantic==2.7.4
 pydantic-settings==2.3.4
-PyJWT==2.8.0
+PyJWT==2.13.0
 passlib[bcrypt]==1.7.4
 # Pin bcrypt: passlib 1.7.4's backend shim is incompatible with bcrypt >= 4.1
 # (raises "password cannot be longer than 72 bytes" / version-detection errors).