diff --git a/runtime/Cargo.lock b/runtime/Cargo.lock
index 7445229d..99d20c91 100644
--- a/runtime/Cargo.lock
+++ b/runtime/Cargo.lock
@@ -2742,6 +2742,22 @@ dependencies = [
  "simple_asn1",
 ]
 
+[[package]]
+name = "jsonwebtoken"
+version = "10.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0529410abe238729a60b108898784df8984c87f6054c9c4fcacc47e4803c1ce1"
+dependencies = [
+ "base64 0.22.1",
+ "getrandom 0.2.16",
+ "js-sys",
+ "pem 3.0.5",
+ "serde",
+ "serde_json",
+ "signature",
+ "simple_asn1",
+]
+
 [[package]]
 name = "jwt-simple"
 version = "0.12.12"
@@ -3212,7 +3228,7 @@ dependencies = [
  "hyper-rustls 0.26.0",
  "hyper-timeout",
  "hyper-util",
- "jsonwebtoken",
+ "jsonwebtoken 9.3.1",
  "once_cell",
  "percent-encoding",
  "pin-project",
@@ -3508,7 +3524,7 @@ dependencies = [
  "futures-util",
  "hex",
  "http 1.3.1",
- "jsonwebtoken",
+ "jsonwebtoken 10.3.0",
  "jwt-simple",
  "log",
  "lru 0.16.3",
diff --git a/runtime/plaid/Cargo.toml b/runtime/plaid/Cargo.toml
index 5896b850..b7e3fafe 100644
--- a/runtime/plaid/Cargo.toml
+++ b/runtime/plaid/Cargo.toml
@@ -43,7 +43,7 @@ flate2 = "1.0"
 futures-util = "0.3.30"
 hex = "0.4.3"
 http = "1"
-jsonwebtoken = { version = "9.2" }
+jsonwebtoken = { version = "10.3" }
 jwt-simple = { version = "0.12.10", default-features = false, features = [
     "pure-rust",
 ] }