diff --git a/Cargo.lock b/Cargo.lock
index 3213cce4..7f8137bf 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1893,9 +1893,9 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "10.4.0"
+version = "11.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eba32bfb4ffdeaca3e34431072faf01745c9b26d25504aa7a6cf5684334fc4fc"
+checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
 dependencies = [
  "aws-lc-rs",
  "base64",
diff --git a/crates/rustapi-extras/Cargo.toml b/crates/rustapi-extras/Cargo.toml
index 9fcbc112..bf3bb206 100644
--- a/crates/rustapi-extras/Cargo.toml
+++ b/crates/rustapi-extras/Cargo.toml
@@ -32,7 +32,7 @@ serde_json = { workspace = true }
 tracing = { workspace = true }
 
 # JWT (feature-gated)
-jsonwebtoken = { version = "=10.4.0", optional = true, default-features = false, features = ["aws_lc_rs"] }
+jsonwebtoken = { version = "=11.0.0", optional = true, default-features = false, features = ["aws_lc_rs"] }
 aws-lc-rs = { version = "1.17", optional = true, features = ["prebuilt-nasm"] }
 
 # Rate limiting (feature-gated)