diff --git a/Cargo.lock b/Cargo.lock
index adaee480..ac88d1ff 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1699,16 +1699,17 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "9.3.1"
+version = "10.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a87cc7a48537badeae96744432de36f4be2b4a34a05a5ef32e9dd8a1c169dde"
+checksum = "0529410abe238729a60b108898784df8984c87f6054c9c4fcacc47e4803c1ce1"
 dependencies = [
  "base64",
+ "getrandom 0.2.17",
  "js-sys",
  "pem",
- "ring",
  "serde",
  "serde_json",
+ "signature",
  "simple_asn1",
 ]
 
diff --git a/crates/rustapi-extras/Cargo.toml b/crates/rustapi-extras/Cargo.toml
index 26db80ac..5cde04ed 100644
--- a/crates/rustapi-extras/Cargo.toml
+++ b/crates/rustapi-extras/Cargo.toml
@@ -33,7 +33,7 @@ thiserror = { workspace = true }
 tracing = { workspace = true }
 
 # JWT (feature-gated)
-jsonwebtoken = { version = "9.3", optional = true }
+jsonwebtoken = { version = "10.3", optional = true }
 
 # Rate limiting (feature-gated)
 dashmap = { version = "6.0", optional = true }