diff --git a/package-lock.json b/package-lock.json
index 9546b063da..749f685388 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7951,7 +7951,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.1.3",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.1.tgz",
+      "integrity": "sha512-jUaKr1yrbfaImV7R2TN/b3IcZzsw38/chqMpo2XJ7i2F8AfM/lA4G1goC3JVEwg0H7UldTmSt3P68nt31W7/mw==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -10916,7 +10918,7 @@
         "@nhs/fhir-middy-error-handler": "^2.1.75",
         "axios": "^1.13.6",
         "axios-retry": "^4.5.0",
-        "jose": "^6.1.3",
+        "jose": "^6.2.1",
         "nock": "^14.0.11"
       },
       "devDependencies": {
diff --git a/packages/nhsNotifyLambda/package.json b/packages/nhsNotifyLambda/package.json
index 0cda1be12c..73d6cfc444 100644
--- a/packages/nhsNotifyLambda/package.json
+++ b/packages/nhsNotifyLambda/package.json
@@ -24,7 +24,7 @@
     "@nhs/fhir-middy-error-handler": "^2.1.75",
     "axios": "^1.13.6",
     "axios-retry": "^4.5.0",
-    "jose": "^6.1.3",
+    "jose": "^6.2.1",
     "nock": "^14.0.11"
   },
   "devDependencies": {