diff --git a/lambdas/backend/poetry.lock b/lambdas/backend/poetry.lock
index 4ae1496a6..99331e8e8 100644
--- a/lambdas/backend/poetry.lock
+++ b/lambdas/backend/poetry.lock
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.1.4 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand.
 
 [[package]]
 name = "async-timeout"
@@ -1323,14 +1323,14 @@ email = ["email-validator (>=1.0.3)"]
 
 [[package]]
 name = "pyjwt"
-version = "2.11.0"
+version = "2.12.0"
 description = "JSON Web Token implementation in Python"
 optional = false
 python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "pyjwt-2.11.0-py3-none-any.whl", hash = "sha256:94a6bde30eb5c8e04fee991062b534071fd1439ef58d2adc9ccb823e7bcd0469"},
-    {file = "pyjwt-2.11.0.tar.gz", hash = "sha256:35f95c1f0fbe5d5ba6e43f00271c275f7a1a4db1dab27bf708073b75318ea623"},
+    {file = "pyjwt-2.12.0-py3-none-any.whl", hash = "sha256:9bb459d1bdd0387967d287f5656bf7ec2b9a26645d1961628cda1764e087fd6e"},
+    {file = "pyjwt-2.12.0.tar.gz", hash = "sha256:2f62390b667cd8257de560b850bb5a883102a388829274147f1d724453f8fb02"},
 ]
 
 [package.dependencies]
@@ -1774,4 +1774,4 @@ test = ["pytest", "pytest-cov"]
 [metadata]
 lock-version = "2.1"
 python-versions = "~3.11"
-content-hash = "be967b3a09c7fd75f709d9959fa79d0fb0c5308645177543bd90b7b51c02fc3f"
+content-hash = "e355a57295b17f9c0d72b8de72df38e91a56239b1b5b18b493f570e2ead0a5c4"
diff --git a/lambdas/backend/pyproject.toml b/lambdas/backend/pyproject.toml
index 98d191e9b..74975499a 100644
--- a/lambdas/backend/pyproject.toml
+++ b/lambdas/backend/pyproject.toml
@@ -20,7 +20,7 @@ moto                    = "^5.1.20"
 requests                = "~2.32.5"
 responses               = "~0.25.7"
 pydantic                = "~1.10.13"
-pyjwt                   = {extras = ["crypto"], version = "^2.11.0"}
+pyjwt                   = {extras = ["crypto"], version = "^2.12.0"}
 jsonpath-ng             = "^1.6.0"
 simplejson              = "^3.20.2"
 structlog               = "^24.1.0"