diff --git a/lib/engine/package.json b/lib/engine/package.json
index 1c345721a..268abffa4 100644
--- a/lib/engine/package.json
+++ b/lib/engine/package.json
@@ -25,7 +25,7 @@
     "@not-govuk/server-renderer": "workspace:^0.8.3",
     "apollo-server-restify": "^1.3.6",
     "base64url": "^3.0.1",
-    "openid-client": "^5.1.8",
+    "openid-client": "^5.6.4",
     "passport": "^0.6.0",
     "passport-http": "^0.3.0",
     "serverless-http": "^3.2.0"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index aa4cb87a3..11ce24ddb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1776,7 +1776,7 @@ importers:
       apollo-server-restify: ^1.3.6
       base64url: ^3.0.1
       graphql: 15.8.0
-      openid-client: ^5.1.8
+      openid-client: ^5.6.4
       passport: ^0.6.0
       passport-http: ^0.3.0
       serverless-http: ^3.2.0
@@ -1788,7 +1788,7 @@ importers:
       '@not-govuk/server-renderer': link:../server-renderer
       apollo-server-restify: 1.3.6_graphql@15.8.0
       base64url: 3.0.1
-      openid-client: 5.4.0
+      openid-client: 5.6.4
       passport: 0.6.0
       passport-http: 0.3.0
       serverless-http: 3.2.0
@@ -13916,8 +13916,8 @@ packages:
       '@sideway/pinpoint': 2.0.0
     dev: true
 
-  /jose/4.13.0:
-    resolution: {integrity: sha512-v6BN7fuPVfG9XIxcPT2jzyAg5EmA/mtNeJEXJ7d31Wz7fFOqOZeN8mPtNJYQmnuAIxJII7EcURcbZ7qXs9a4kA==}
+  /jose/4.15.4:
+    resolution: {integrity: sha512-W+oqK4H+r5sITxfxpSU+MMdr/YSWGvgZMQDIsNoBDGGy4i7GBPTtvFKibQzW06n3U3TqHjhvBJsirShsEJ6eeQ==}
     dev: false
 
   /js-beautify/1.15.1:
@@ -15272,8 +15272,8 @@ packages:
     resolution: {integrity: sha512-PX1wu0AmAdPqOL1mWhqmlOd8kOIZQwGZw6rh7uby9fTc5lhaOWFLX3I6R1hrF9k3zUY40e6igsLGkDXK92LJNg==}
     dev: false
 
-  /oidc-token-hash/5.0.1:
-    resolution: {integrity: sha512-EvoOtz6FIEBzE+9q253HsLCVRiK/0doEJ2HCvvqMQb3dHZrP3WlJKYtJ55CRTw4jmYomzH4wkPuCj/I3ZvpKxQ==}
+  /oidc-token-hash/5.0.3:
+    resolution: {integrity: sha512-IF4PcGgzAr6XXSff26Sk/+P4KZFJVuHAJZj3wgO3vX2bMdNVp/QXTP3P7CEm9V1IdG8lDLY3HhiqpsE/nOwpPw==}
     engines: {node: ^10.13.0 || >=12.0.0}
     dev: false
 
@@ -15322,13 +15322,13 @@ packages:
     hasBin: true
     dev: false
 
-  /openid-client/5.4.0:
-    resolution: {integrity: sha512-hgJa2aQKcM2hn3eyVtN12tEA45ECjTJPXCgUh5YzTzy9qwapCvmDTVPWOcWVL0d34zeQoQ/hbG9lJhl3AYxJlQ==}
+  /openid-client/5.6.4:
+    resolution: {integrity: sha512-T1h3B10BRPKfcObdBklX639tVz+xh34O7GjofqrqiAQdm7eHsQ00ih18x6wuJ/E6FxdtS2u3FmUGPDeEcMwzNA==}
     dependencies:
-      jose: 4.13.0
+      jose: 4.15.4
       lru-cache: 6.0.0
       object-hash: 2.2.0
-      oidc-token-hash: 5.0.1
+      oidc-token-hash: 5.0.3
     dev: false
 
   /optimism/0.16.2: