diff --git a/packages/api/package.json b/packages/api/package.json
index 6d4350994712..b5f412aef97f 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -36,7 +36,7 @@
     "@whatwg-node/fetch": "0.9.9",
     "core-js": "3.33.2",
     "humanize-string": "2.1.0",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "pascalcase": "1.0.0",
     "pino": "8.15.1",
     "title-case": "3.0.3"
@@ -45,7 +45,7 @@
     "@babel/cli": "7.23.0",
     "@babel/core": "^7.22.20",
     "@types/aws-lambda": "8.10.119",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "@types/memjs": "1",
     "@types/pascalcase": "1.0.1",
     "@types/split2": "4.2.0",
diff --git a/packages/auth-providers/auth0/api/package.json b/packages/auth-providers/auth0/api/package.json
index aa870cfe3df8..066d3a500c22 100644
--- a/packages/auth-providers/auth0/api/package.json
+++ b/packages/auth-providers/auth0/api/package.json
@@ -24,14 +24,14 @@
   "dependencies": {
     "@babel/runtime-corejs3": "7.23.2",
     "core-js": "3.33.2",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "jwks-rsa": "3.0.1"
   },
   "devDependencies": {
     "@babel/cli": "7.23.0",
     "@babel/core": "^7.22.20",
     "@redwoodjs/api": "6.0.7",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "jest": "29.7.0",
     "typescript": "5.2.2"
   },
diff --git a/packages/auth-providers/azureActiveDirectory/api/package.json b/packages/auth-providers/azureActiveDirectory/api/package.json
index e1d902a9ad69..2aa0b82554fa 100644
--- a/packages/auth-providers/azureActiveDirectory/api/package.json
+++ b/packages/auth-providers/azureActiveDirectory/api/package.json
@@ -24,7 +24,7 @@
   "dependencies": {
     "@babel/runtime-corejs3": "7.23.2",
     "core-js": "3.33.2",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "jwks-rsa": "3.0.1"
   },
   "devDependencies": {
@@ -32,7 +32,7 @@
     "@babel/core": "^7.22.20",
     "@redwoodjs/api": "6.0.7",
     "@types/aws-lambda": "8.10.119",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "jest": "29.7.0",
     "typescript": "5.2.2"
   },
diff --git a/packages/auth-providers/netlify/api/package.json b/packages/auth-providers/netlify/api/package.json
index 571afceca327..7ce855e65fcd 100644
--- a/packages/auth-providers/netlify/api/package.json
+++ b/packages/auth-providers/netlify/api/package.json
@@ -24,14 +24,14 @@
   "dependencies": {
     "@babel/runtime-corejs3": "7.23.2",
     "core-js": "3.33.2",
-    "jsonwebtoken": "9.0.0"
+    "jsonwebtoken": "9.0.2"
   },
   "devDependencies": {
     "@babel/cli": "7.23.0",
     "@babel/core": "^7.22.20",
     "@redwoodjs/api": "6.0.7",
     "@types/aws-lambda": "8.10.119",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "jest": "29.7.0",
     "typescript": "5.2.2"
   },
diff --git a/packages/auth-providers/supabase/api/package.json b/packages/auth-providers/supabase/api/package.json
index bad718f4aafa..8141dda34ea4 100644
--- a/packages/auth-providers/supabase/api/package.json
+++ b/packages/auth-providers/supabase/api/package.json
@@ -24,14 +24,14 @@
   "dependencies": {
     "@babel/runtime-corejs3": "7.23.2",
     "core-js": "3.33.2",
-    "jsonwebtoken": "9.0.0"
+    "jsonwebtoken": "9.0.2"
   },
   "devDependencies": {
     "@babel/cli": "7.23.0",
     "@babel/core": "^7.22.20",
     "@redwoodjs/api": "6.0.7",
     "@types/aws-lambda": "8.10.119",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "jest": "29.7.0",
     "typescript": "5.2.2"
   },
diff --git a/packages/auth-providers/supertokens/api/package.json b/packages/auth-providers/supertokens/api/package.json
index 281e15e15e4b..7a0acf0b53f7 100644
--- a/packages/auth-providers/supertokens/api/package.json
+++ b/packages/auth-providers/supertokens/api/package.json
@@ -24,14 +24,14 @@
   "dependencies": {
     "@babel/runtime-corejs3": "7.23.2",
     "core-js": "3.33.2",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "jwks-rsa": "3.0.1"
   },
   "devDependencies": {
     "@babel/cli": "7.23.0",
     "@babel/core": "^7.22.20",
     "@redwoodjs/api": "6.0.7",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "jest": "29.7.0",
     "typescript": "5.2.2"
   },
diff --git a/packages/graphql-server/package.json b/packages/graphql-server/package.json
index 2c3c2dba8ce1..dadadea0cbc8 100644
--- a/packages/graphql-server/package.json
+++ b/packages/graphql-server/package.json
@@ -49,13 +49,13 @@
     "@envelop/types": "4.0.0",
     "@redwoodjs/project-config": "6.0.7",
     "@redwoodjs/realtime": "6.0.7",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "@types/lodash": "4.14.195",
     "@types/uuid": "9.0.2",
     "@whatwg-node/fetch": "0.9.9",
     "aws-lambda": "1.0.7",
     "jest": "29.7.0",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "typescript": "5.2.2"
   },
   "gitHead": "3905ed045508b861b495f8d5630d76c7a157d8f1"
diff --git a/packages/studio/package.json b/packages/studio/package.json
index 19e95b2feb1d..13420bf131c3 100644
--- a/packages/studio/package.json
+++ b/packages/studio/package.json
@@ -39,7 +39,7 @@
     "graphql": "16.8.1",
     "graphql-scalars": "1.22.4",
     "graphql-yoga": "4.0.4",
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "lodash": "4.17.21",
     "mailparser": "^3.6.5",
     "pretty-bytes": "5.6.0",
@@ -67,7 +67,7 @@
     "@tailwindcss/forms": "0.5.3",
     "@tremor/react": "3.4.1",
     "@types/aws-lambda": "8.10.119",
-    "@types/jsonwebtoken": "9.0.2",
+    "@types/jsonwebtoken": "9.0.5",
     "@types/lodash": "4.14.195",
     "@types/mailparser": "^3",
     "@types/qs": "6.9.7",
diff --git a/yarn.lock b/yarn.lock
index feceffd32fb5..02a584971c0c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7886,7 +7886,7 @@ __metadata:
     "@babel/runtime-corejs3": 7.23.2
     "@prisma/client": 5.5.2
     "@types/aws-lambda": 8.10.119
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     "@types/memjs": 1
     "@types/pascalcase": 1.0.1
     "@types/split2": 4.2.0
@@ -7894,7 +7894,7 @@ __metadata:
     core-js: 3.33.2
     humanize-string: 2.1.0
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     memjs: 1.3.1
     pascalcase: 1.0.0
     pino: 8.15.1
@@ -7927,10 +7927,10 @@ __metadata:
     "@babel/core": ^7.22.20
     "@babel/runtime-corejs3": 7.23.2
     "@redwoodjs/api": 6.0.7
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     core-js: 3.33.2
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     jwks-rsa: 3.0.1
     typescript: 5.2.2
   languageName: unknown
@@ -7979,10 +7979,10 @@ __metadata:
     "@babel/runtime-corejs3": 7.23.2
     "@redwoodjs/api": 6.0.7
     "@types/aws-lambda": 8.10.119
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     core-js: 3.33.2
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     jwks-rsa: 3.0.1
     typescript: 5.2.2
   languageName: unknown
@@ -8206,10 +8206,10 @@ __metadata:
     "@babel/runtime-corejs3": 7.23.2
     "@redwoodjs/api": 6.0.7
     "@types/aws-lambda": 8.10.119
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     core-js: 3.33.2
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     typescript: 5.2.2
   languageName: unknown
   linkType: soft
@@ -8257,10 +8257,10 @@ __metadata:
     "@babel/runtime-corejs3": 7.23.2
     "@redwoodjs/api": 6.0.7
     "@types/aws-lambda": 8.10.119
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     core-js: 3.33.2
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     typescript: 5.2.2
   languageName: unknown
   linkType: soft
@@ -8306,10 +8306,10 @@ __metadata:
     "@babel/core": ^7.22.20
     "@babel/runtime-corejs3": 7.23.2
     "@redwoodjs/api": 6.0.7
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     core-js: 3.33.2
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     jwks-rsa: 3.0.1
     typescript: 5.2.2
   peerDependencies:
@@ -8768,7 +8768,7 @@ __metadata:
     "@redwoodjs/api": 6.0.7
     "@redwoodjs/project-config": 6.0.7
     "@redwoodjs/realtime": 6.0.7
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     "@types/lodash": 4.14.195
     "@types/uuid": 9.0.2
     "@whatwg-node/fetch": 0.9.9
@@ -8779,7 +8779,7 @@ __metadata:
     graphql-tag: 2.12.6
     graphql-yoga: 4.0.4
     jest: 29.7.0
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     lodash: 4.17.21
     typescript: 5.2.2
     uuid: 9.0.0
@@ -9101,7 +9101,7 @@ __metadata:
     "@tailwindcss/forms": 0.5.3
     "@tremor/react": 3.4.1
     "@types/aws-lambda": 8.10.119
-    "@types/jsonwebtoken": 9.0.2
+    "@types/jsonwebtoken": 9.0.5
     "@types/lodash": 4.14.195
     "@types/mailparser": ^3
     "@types/qs": 6.9.7
@@ -9129,7 +9129,7 @@ __metadata:
     graphql-yoga: 4.0.4
     jest: 29.7.0
     json-bigint-patch: 0.0.8
-    jsonwebtoken: 9.0.0
+    jsonwebtoken: 9.0.2
     lodash: 4.17.21
     mailparser: ^3.6.5
     postcss: 8.4.31
@@ -11755,12 +11755,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/jsonwebtoken@npm:9.0.2, @types/jsonwebtoken@npm:^9.0.0":
-  version: 9.0.2
-  resolution: "@types/jsonwebtoken@npm:9.0.2"
+"@types/jsonwebtoken@npm:9.0.5, @types/jsonwebtoken@npm:^9.0.0":
+  version: 9.0.5
+  resolution: "@types/jsonwebtoken@npm:9.0.5"
   dependencies:
     "@types/node": "*"
-  checksum: 5af586c291b3e3341be844f76ce0de53e15f3cbc8dbc147f79ab3af4f5e2a2bf3499f3dcbfb85752f1f265d9a9362bbe8104d0173e24c6d8d7b23e41821e0dbe
+  checksum: c582b8420586f3b9550f7e34992cb32be300bc953636f3b087ed9c180ce7ea5c2e4b35090be2d57f0d3168cc3ca1074932907caa2afe09f4e9c84cf5c0daefa8
   languageName: node
   linkType: hard
 
@@ -24289,27 +24289,21 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jsonwebtoken@npm:9.0.0":
-  version: 9.0.0
-  resolution: "jsonwebtoken@npm:9.0.0"
-  dependencies:
-    jws: ^3.2.2
-    lodash: ^4.17.21
-    ms: ^2.1.1
-    semver: ^7.3.8
-  checksum: 60c30d90d8a69b8e7148306e0c299ac120dbde9c032add48d26df928fe349e952cf4b09f12d7942257681a936e3374e4d49280ab20f8a4578688c7f08d87f9bc
-  languageName: node
-  linkType: hard
-
-"jsonwebtoken@npm:^9.0.0":
-  version: 9.0.1
-  resolution: "jsonwebtoken@npm:9.0.1"
+"jsonwebtoken@npm:9.0.2, jsonwebtoken@npm:^9.0.0":
+  version: 9.0.2
+  resolution: "jsonwebtoken@npm:9.0.2"
   dependencies:
     jws: ^3.2.2
-    lodash: ^4.17.21
+    lodash.includes: ^4.3.0
+    lodash.isboolean: ^3.0.3
+    lodash.isinteger: ^4.0.4
+    lodash.isnumber: ^3.0.3
+    lodash.isplainobject: ^4.0.6
+    lodash.isstring: ^4.0.1
+    lodash.once: ^4.0.0
     ms: ^2.1.1
-    semver: ^7.3.8
-  checksum: 3508912a0fb5ad06a09a79f655681f6fc389376fb8e7fdcaf367fbdd02e9fb5e11a7a4ff715cbe44d8be0e7a99319b03a7d34ef5daede61cf1f8d3519bbb08d6
+    semver: ^7.5.4
+  checksum: d287a29814895e866db2e5a0209ce730cbc158441a0e5a70d5e940eb0d28ab7498c6bf45029cc8b479639bca94056e9a7f254e2cdb92a2f5750c7f358657a131
   languageName: node
   linkType: hard
 
@@ -25049,6 +25043,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash.includes@npm:^4.3.0":
+  version: 4.3.0
+  resolution: "lodash.includes@npm:4.3.0"
+  checksum: 7ca498b9b75bf602d04e48c0adb842dfc7d90f77bcb2a91a2b2be34a723ad24bc1c8b3683ec6b2552a90f216c723cdea530ddb11a3320e08fa38265703978f4b
+  languageName: node
+  linkType: hard
+
 "lodash.isarguments@npm:^3.1.0":
   version: 3.1.0
   resolution: "lodash.isarguments@npm:3.1.0"
@@ -25056,6 +25057,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash.isboolean@npm:^3.0.3":
+  version: 3.0.3
+  resolution: "lodash.isboolean@npm:3.0.3"
+  checksum: 0aac604c1ef7e72f9a6b798e5b676606042401dd58e49f051df3cc1e3adb497b3d7695635a5cbec4ae5f66456b951fdabe7d6b387055f13267cde521f10ec7f7
+  languageName: node
+  linkType: hard
+
 "lodash.isequal@npm:^4.0.0":
   version: 4.5.0
   resolution: "lodash.isequal@npm:4.5.0"
@@ -25063,6 +25071,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash.isinteger@npm:^4.0.4":
+  version: 4.0.4
+  resolution: "lodash.isinteger@npm:4.0.4"
+  checksum: 4c3e023a2373bf65bf366d3b8605b97ec830bca702a926939bcaa53f8e02789b6a176e7f166b082f9365bfec4121bfeb52e86e9040cb8d450e64c858583f61b7
+  languageName: node
+  linkType: hard
+
 "lodash.ismatch@npm:^4.4.0":
   version: 4.4.0
   resolution: "lodash.ismatch@npm:4.4.0"
@@ -25070,6 +25085,27 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash.isnumber@npm:^3.0.3":
+  version: 3.0.3
+  resolution: "lodash.isnumber@npm:3.0.3"
+  checksum: 2d01530513a1ee4f72dd79528444db4e6360588adcb0e2ff663db2b3f642d4bb3d687051ae1115751ca9082db4fdef675160071226ca6bbf5f0c123dbf0aa12d
+  languageName: node
+  linkType: hard
+
+"lodash.isplainobject@npm:^4.0.6":
+  version: 4.0.6
+  resolution: "lodash.isplainobject@npm:4.0.6"
+  checksum: afd70b5c450d1e09f32a737bed06ff85b873ecd3d3d3400458725283e3f2e0bb6bf48e67dbe7a309eb371a822b16a26cca4a63c8c52db3fc7dc9d5f9dd324cbb
+  languageName: node
+  linkType: hard
+
+"lodash.isstring@npm:^4.0.1":
+  version: 4.0.1
+  resolution: "lodash.isstring@npm:4.0.1"
+  checksum: 09eaf980a283f9eef58ef95b30ec7fee61df4d6bf4aba3b5f096869cc58f24c9da17900febc8ffd67819b4e29de29793190e88dc96983db92d84c95fa85d1c92
+  languageName: node
+  linkType: hard
+
 "lodash.kebabcase@npm:^4.1.1":
   version: 4.1.1
   resolution: "lodash.kebabcase@npm:4.1.1"
@@ -25098,7 +25134,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lodash.once@npm:^4.1.1":
+"lodash.once@npm:^4.0.0, lodash.once@npm:^4.1.1":
   version: 4.1.1
   resolution: "lodash.once@npm:4.1.1"
   checksum: 46a9a0a66c45dd812fcc016e46605d85ad599fe87d71a02f6736220554b52ffbe82e79a483ad40f52a8a95755b0d1077fba259da8bfb6694a7abbf4a48f1fc04