diff --git a/package.json b/package.json
index 29a32cc0f1..5e62b762bc 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "react-dom": "^18.2.0",
     "react-ga4": "^2.1.0",
     "rxjs": "^7.8.1",
-    "semver": "^7.6.1",
+    "semver": "^7.6.2",
     "set-value": "^4.1.0",
     "stripe": "^15.4.0",
     "tslib": "^2.6.2",
diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 5a5c1a745e..2be85e60bb 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -103,7 +103,7 @@
     "i18n-iso-countries": "^7.11.0",
     "ioredis": "^4.28.2",
     "joi": "^17.8.3",
-    "jose": "^5.0.1",
+    "jose": "^5.3.0",
     "jsdom": "^24.0.0",
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.1.0",
diff --git a/packages/fxa-settings/package.json b/packages/fxa-settings/package.json
index 785081b451..83479e089e 100644
--- a/packages/fxa-settings/package.json
+++ b/packages/fxa-settings/package.json
@@ -177,7 +177,7 @@
     "resolve": "^1.22.8",
     "resolve-url-loader": "^5.0.0",
     "sass-loader": "^14.2.1",
-    "semver": "^7.6.1",
+    "semver": "^7.6.2",
     "source-map-loader": "^5.0.0",
     "style-loader": "^4.0.0",
     "subscriptions-transport-ws": "^0.11.0",
diff --git a/yarn.lock b/yarn.lock
index a878568a2f..83b0bd4b64 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -37781,7 +37781,7 @@ fsevents@~2.1.1:
     i18n-iso-countries: ^7.11.0
     ioredis: ^4.28.2
     joi: ^17.8.3
-    jose: ^5.0.1
+    jose: ^5.3.0
     jsdom: ^24.0.0
     jsonwebtoken: ^9.0.0
     jsxgettext-recursive-next: 1.1.0
@@ -38559,7 +38559,7 @@ fsevents@~2.1.1:
     resolve: ^1.22.8
     resolve-url-loader: ^5.0.0
     sass-loader: ^14.2.1
-    semver: ^7.6.1
+    semver: ^7.6.2
     sinon: ^15.0.1
     source-map-loader: ^5.0.0
     storybook: ^7.0.23
@@ -38810,7 +38810,7 @@ fsevents@~2.1.1:
     react-test-renderer: ^18.3.1
     reflect-metadata: ^0.2.1
     rxjs: ^7.8.1
-    semver: ^7.6.1
+    semver: ^7.6.2
     server-only: ^0.0.1
     set-value: ^4.1.0
     stripe: ^15.4.0
@@ -45908,13 +45908,20 @@ fsevents@~2.1.1:
   languageName: node
   linkType: hard
 
-"jose@npm:^5.0.1, jose@npm:^5.1.3":
+"jose@npm:^5.1.3":
   version: 5.2.4
   resolution: "jose@npm:5.2.4"
   checksum: 81e1f4494f406debd14392975327f0daa8b88ff09c83f2fe94754dcd7cfdefdb1adf785b2ec7481751927e609d342581cd41cb444628ef62fca423facebcd280
   languageName: node
   linkType: hard
 
+"jose@npm:^5.3.0":
+  version: 5.3.0
+  resolution: "jose@npm:5.3.0"
+  checksum: 822ba4d8f80ee5efb53763fd9daad20b08967bc2fcce0f74e95c31280fb12e34bcbc33c2090abccd5c3ef80b7bbab0f656581212bc72281280047a8496ae564c
+  languageName: node
+  linkType: hard
+
 "jquery-modal@https://github.com/mozilla-fxa/jquery-modal.git#0576775d1b4590314b114386019f4c7421c77503":
   version: 0.7.1
   resolution: "jquery-modal@https://github.com/mozilla-fxa/jquery-modal.git#commit=0576775d1b4590314b114386019f4c7421c77503"
@@ -58981,12 +58988,12 @@ resolve@1.1.7:
   languageName: node
   linkType: hard
 
-"semver@npm:^7.6.1":
-  version: 7.6.1
-  resolution: "semver@npm:7.6.1"
+"semver@npm:^7.6.2":
+  version: 7.6.2
+  resolution: "semver@npm:7.6.2"
   bin:
     semver: bin/semver.js
-  checksum: 2c9c89b985230c0fcf02c96ae6a3ca40c474f2f4e838634394691e6e10c347a0c6def0f14fc355d82f90f1744a073b8b9c45457b108aa728280b5d68ed7961cd
+  checksum: 40f6a95101e8d854357a644da1b8dd9d93ce786d5c6a77227bc69dbb17bea83d0d1d1d7c4cd5920a6df909f48e8bd8a5909869535007f90278289f2451d0292d
   languageName: node
   linkType: hard