diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7b87dd4e0..b1ab4f756 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -788,7 +788,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       pg:
         specifier: ^8.11.3
         version: 8.16.3
@@ -885,7 +885,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       node-cron:
         specifier: ^4.2.1
         version: 4.2.1
@@ -1236,7 +1236,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       node-cron:
         specifier: ^3.0.3
         version: 3.0.3
@@ -1421,7 +1421,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       pg:
         specifier: ^8.11.3
         version: 8.16.3
@@ -1705,7 +1705,7 @@ importers:
         version: 4.22.1
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       openai:
         specifier: ^4.20.1
         version: 4.104.0(encoding@0.1.13)(ws@8.18.3(bufferutil@4.0.9))(zod@3.25.76)
@@ -2029,7 +2029,7 @@ importers:
         version: 4.22.1
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       pg:
         specifier: ^8.11.3
         version: 8.16.3
@@ -2096,7 +2096,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       next:
         specifier: 15.5.7
         version: 15.5.7(@opentelemetry/api@1.9.0)(babel-plugin-macros@3.1.0)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(sass@1.94.1)
@@ -2353,7 +2353,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       pg:
         specifier: ^8.11.3
         version: 8.16.3
@@ -2776,7 +2776,7 @@ importers:
         version: 6.1.0(encoding@0.1.13)(graphql@16.12.0)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       pg:
         specifier: ^8.11.3
         version: 8.16.3
@@ -2913,7 +2913,7 @@ importers:
         version: 13.6.0(encoding@0.1.13)
       jsonwebtoken:
         specifier: ^9.0.2
-        version: 9.0.2
+        version: 9.0.3
       uuid:
         specifier: ^9.0.1
         version: 9.0.1
@@ -10972,6 +10972,10 @@ packages:
     resolution: {integrity: sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ==}
     engines: {node: '>=12', npm: '>=6'}
 
+  jsonwebtoken@9.0.3:
+    resolution: {integrity: sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==}
+    engines: {node: '>=12', npm: '>=6'}
+
   jsprim@1.4.2:
     resolution: {integrity: sha512-P2bSOMAc/ciLz6DzgjVlGJP9+BrJWu5UDGK70C2iweC5QBIeFf0ZXRvGjEj2uYgrY2MkAAhsSWHDWlFtEroZWw==}
     engines: {node: '>=0.6.0'}
@@ -10996,6 +11000,9 @@ packages:
   jws@4.0.0:
     resolution: {integrity: sha512-KDncfTmOZoOMTFG4mBlG0qUIOlc03fmzH+ru6RgYVZhPkyiy/92Owlt/8UEN+a4TXR1FQetfIpJE8ApdvdVxTg==}
 
+  jws@4.0.1:
+    resolution: {integrity: sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==}
+
   katex@0.16.27:
     resolution: {integrity: sha512-aeQoDkuRWSqQN6nSvVCEFvfXdqo1OQiCmmW1kc9xSdjutPv7BGO7pqY9sQRJpMOGrEdfDgF2TfRXe5eUAD2Waw==}
     hasBin: true
@@ -23588,7 +23595,7 @@ snapshots:
       '@firebase/database-types': 1.0.5
       '@types/node': 22.19.2
       farmhash-modern: 1.1.0
-      jsonwebtoken: 9.0.2
+      jsonwebtoken: 9.0.3
       jwks-rsa: 3.2.0
       node-forge: 1.3.1
       uuid: 10.0.0
@@ -25391,6 +25398,19 @@ snapshots:
       ms: 2.1.3
       semver: 7.7.3
 
+  jsonwebtoken@9.0.3:
+    dependencies:
+      jws: 4.0.1
+      lodash.includes: 4.3.0
+      lodash.isboolean: 3.0.3
+      lodash.isinteger: 4.0.4
+      lodash.isnumber: 3.0.3
+      lodash.isplainobject: 4.0.6
+      lodash.isstring: 4.0.1
+      lodash.once: 4.1.1
+      ms: 2.1.3
+      semver: 7.7.3
+
   jsprim@1.4.2:
     dependencies:
       assert-plus: 1.0.0
@@ -25438,6 +25458,11 @@ snapshots:
       jwa: 2.0.1
       safe-buffer: 5.2.1
 
+  jws@4.0.1:
+    dependencies:
+      jwa: 2.0.1
+      safe-buffer: 5.2.1
+
   katex@0.16.27:
     dependencies:
       commander: 8.3.0