diff --git a/backend/requirements.txt b/backend/requirements.txt
index 4f291f4..3b90bde 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -8,7 +8,7 @@ google-genai>=1.0.0
 python-dotenv>=1.2.2
 httpx>=0.28.1
 bcrypt>=4.0.0
-PyJWT>=2.0.0
+PyJWT>=2.13.0
 google-auth>=2.0.0
 psycopg2-binary>=2.9.0
 # Pillow < 10.3 has multiple image-parsing CVEs (buffer overflow).