diff --git a/backend/python/pydevlake/poetry.lock b/backend/python/pydevlake/poetry.lock
index ff6e2188e9c..4972807805e 100644
--- a/backend/python/pydevlake/poetry.lock
+++ b/backend/python/pydevlake/poetry.lock
@@ -365,14 +365,14 @@ files = [
 
 [[package]]
 name = "jsonpointer"
-version = "2.4"
-description = "Identify specific nodes in a JSON document (RFC 6901)"
+version = "3.1.1"
+description = "Identify specific nodes in a JSON document (RFC 6901) "
 optional = false
-python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*, !=3.6.*"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "jsonpointer-2.4-py2.py3-none-any.whl", hash = "sha256:15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"},
-    {file = "jsonpointer-2.4.tar.gz", hash = "sha256:585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"},
+    {file = "jsonpointer-3.1.1-py3-none-any.whl", hash = "sha256:8ff8b95779d071ba472cf5bc913028df06031797532f08a7d5b602d8b2a488ca"},
+    {file = "jsonpointer-3.1.1.tar.gz", hash = "sha256:0b801c7db33a904024f6004d526dcc53bbb8a4a0f4e32bfd10beadf60adf1900"},
 ]
 
 [[package]]
@@ -740,4 +740,4 @@ zstd = ["backports-zstd (>=1.0.0) ; python_version < \"3.14\""]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.11,<3.12"
-content-hash = "e7b7ce928a424553a4d9f3108d62a88190aebcf382dfff8efb36ec7e43b2ca00"
+content-hash = "f2afa03a56d7f29fcdee6ed6cc4a02c5430fc2c98900dd49505205a58d51b68f"
diff --git a/backend/python/pydevlake/pyproject.toml b/backend/python/pydevlake/pyproject.toml
index 3424463f10a..c2ece7b18e5 100644
--- a/backend/python/pydevlake/pyproject.toml
+++ b/backend/python/pydevlake/pyproject.toml
@@ -33,7 +33,7 @@ pydevd-pycharm = "^231.6471.3"
 pytest = "^9.1.1"
 jsonref = "^1.1.0"
 psycopg2 = "^2.9.5"
-jsonpointer = "^2.3"
+jsonpointer = ">=2.3,<4.0"
 certifi = "^2026.7.22"