diff --git a/backend/requirements.txt b/backend/requirements.txt
index 68d397b..76c4688 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -6,7 +6,7 @@ python-dotenv==1.2.2
 aiosqlite==0.19.0
 pydantic==2.13.4
 bech32==1.2.0
-PyJWT==2.13.0
+PyJWT==2.15.1
 cryptography==50.0.0
 python-multipart>=0.0.31  # CVE-2024-24762 + later multipart DoS fixes
 bip_utils==2.9.3
diff --git a/requirements.txt b/requirements.txt
index ffe2b50..445ade2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,7 @@ python-dotenv==1.2.2
 aiosqlite==0.19.0
 pydantic==2.13.4
 bech32==1.2.0
-PyJWT==2.13.0
+PyJWT==2.15.1
 cryptography==50.0.0
 python-multipart==0.0.31
 Pillow==12.3.0