diff --git a/package.json b/package.json
index d8b000d..08d50a2 100644
--- a/package.json
+++ b/package.json
@@ -76,7 +76,7 @@
     "css-loader": "^5.2.6",
     "date-fns": "^2.22.1",
     "identity-obj-proxy": "^3.0.0",
-    "jose": "^4.8.1",
+    "jose": "^4.9.2",
     "@guardian/pluto-headers": "^2.0.0-pre6",
     "process": "^0.11.10",
     "query-string": "^6.13.1",
diff --git a/yarn.lock b/yarn.lock
index b42788c..069b124 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4565,10 +4565,10 @@ jest@^26.0.1:
     import-local "^3.0.2"
     jest-cli "^26.0.1"
 
-jose@^4.8.1:
-  version "4.8.1"
-  resolved "https://registry.yarnpkg.com/jose/-/jose-4.8.1.tgz#dc7c2660b115ba29b44880e588c5ac313c158247"
-  integrity sha512-+/hpTbRcCw9YC0TOfN1W47pej4a9lRmltdOVdRLz5FP5UvUq3CenhXjQK7u/8NdMIIShMXYAh9VLPhc7TjhvFw==
+jose@^4.9.2:
+  version "4.9.2"
+  resolved "https://registry.yarnpkg.com/jose/-/jose-4.9.2.tgz#268994df4443b9c191de0b001c2e3796ac6cf368"
+  integrity sha512-EqKvu2PqJCD3Jrg3PvcYZVS7D21qMVLSYMDAFcOdGUEOpJSLNtJO7NjLANvu3SYHVl6pdP2ff7ve6EZW2nX7Nw==
 
 "js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
   version "4.0.0"