diff --git a/.changeset/wet-balloons-fix.md b/.changeset/wet-balloons-fix.md
new file mode 100644
index 00000000..b0d00ddd
--- /dev/null
+++ b/.changeset/wet-balloons-fix.md
@@ -0,0 +1,5 @@
+---
+'@sigstore/mock': patch
+---
+
+Bump jose from 5.4.0 to 5.6.2
diff --git a/package-lock.json b/package-lock.json
index 46d95d6c..694d8887 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4764,9 +4764,9 @@
       }
     },
     "node_modules/@oclif/core": {
-      "version": "4.0.6",
-      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.0.6.tgz",
-      "integrity": "sha512-z/4YUVQsf2pHsXRze5etbmvAYDhoUhIzpM6oJGEdsdWfvQJ6YQBogH7TdX/ItuGda6+vpfXg/4U1CtPexSF+bA==",
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.0.8.tgz",
+      "integrity": "sha512-9AzNoRlKfIeuqOin+HK9cyouELeup7sX+MGIFc5dR+bnG0sSzFnV1A/Z57E7KWrY5NdWULHYT5NhiL1YpEhG2w==",
       "dependencies": {
         "ansi-escapes": "^4.3.2",
         "ansis": "^3.1.1",
@@ -4779,7 +4779,7 @@
         "indent-string": "^4.0.0",
         "is-wsl": "^2.2.0",
         "lilconfig": "^3.1.2",
-        "minimatch": "^9.0.4",
+        "minimatch": "^9.0.5",
         "string-width": "^4.2.3",
         "supports-color": "^8",
         "widest-line": "^3.1.0",
@@ -4811,9 +4811,9 @@
       }
     },
     "node_modules/@oclif/plugin-help": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.3.tgz",
-      "integrity": "sha512-ogaCD2i6dmEgrrIKG8iV42o/s45EG53Q+dW/zeEhL8It9UdVDooXjXkZLPSyRS+CyrbK3it8Mwh08DrJxjZiqQ==",
+      "version": "6.2.4",
+      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.4.tgz",
+      "integrity": "sha512-0UrLxHseBuwh3JVRluJFe1eT1OT5dBvbwcbAYVO8uNi/ctmaWCAw4j737l8BFnf01GpDsloSAWyEX4dtG0P1zg==",
       "dependencies": {
         "@oclif/core": "^4"
       },
@@ -11138,9 +11138,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "5.4.0",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-5.4.0.tgz",
-      "integrity": "sha512-6rpxTHPAQyWMb9A35BroFl1Sp0ST3DpPcm5EVIxZxdH+e0Hv9fwhyB3XLKFUcHNpdSDnETmBfuPPTTlYz5+USw==",
+      "version": "5.6.2",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-5.6.2.tgz",
+      "integrity": "sha512-F1t1/WZJ4JdmCE/XoMYw1dPOW5g8JF0xGm6Ox2fwaCAPlCzt+4Bh0EWP59iQuZNHHauDkCdjx+kCZSh5z/PGow==",
       "funding": {
         "url": "https://github.com/sponsors/panva"
       }
@@ -11560,8 +11560,9 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "9.0.4",
-      "license": "ISC",
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
+      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
       "dependencies": {
         "brace-expansion": "^2.0.1"
       },
@@ -14451,7 +14452,7 @@
         "asn1js": "^3.0.5",
         "bytestreamjs": "^2.0.1",
         "canonicalize": "^2.0.0",
-        "jose": "^5.4.0",
+        "jose": "^5.6.2",
         "nock": "^13.5.4",
         "pkijs": "^3.1.0",
         "pvutils": "^1.1.3"
diff --git a/packages/mock/package.json b/packages/mock/package.json
index 1208355f..44bfcd3a 100644
--- a/packages/mock/package.json
+++ b/packages/mock/package.json
@@ -36,7 +36,7 @@
     "asn1js": "^3.0.5",
     "bytestreamjs": "^2.0.1",
     "canonicalize": "^2.0.0",
-    "jose": "^5.4.0",
+    "jose": "^5.6.2",
     "nock": "^13.5.4",
     "pkijs": "^3.1.0",
     "pvutils": "^1.1.3"