diff --git a/packages/accounts/package.json b/packages/accounts/package.json
index 7c6fb67fdd..f36381a44d 100644
--- a/packages/accounts/package.json
+++ b/packages/accounts/package.json
@@ -41,7 +41,7 @@
     "express": "4.17.1",
     "ismobilejs": "^1.1.1",
     "js-yaml": "^3.14.1",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.21",
     "mem": "^5.1.1",
     "mongodb": "^3.7.3",
diff --git a/packages/auth/package.json b/packages/auth/package.json
index 99c2deb2e3..34af969f56 100644
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -18,7 +18,7 @@
     "cookies": "^0.8.0",
     "express": "^4.16.4",
     "ismobilejs": "^1.1.1",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "sha256": "^0.2.0",
     "underscore": "^1.9.1"
   },
diff --git a/packages/objectql/package.json b/packages/objectql/package.json
index 741b122a92..c48628e6c0 100644
--- a/packages/objectql/package.json
+++ b/packages/objectql/package.json
@@ -37,7 +37,7 @@
     "graphql": "^15.8.0",
     "graphql-parse-resolve-info": "^4.12.3",
     "jsen": "^0.6.6",
-    "jsonwebtoken": "8.5.1",
+    "jsonwebtoken": "9.0.0",
     "lodash": "^4.17.21",
     "mingo": "^6.0.5",
     "moleculer": "^0.14.25",
diff --git a/services/service-identity-jwt/package.json b/services/service-identity-jwt/package.json
index 1bc5b68139..999ed79103 100644
--- a/services/service-identity-jwt/package.json
+++ b/services/service-identity-jwt/package.json
@@ -13,7 +13,7 @@
     "dependencies": {
         "@steedos/accounts": "2.3.5",
         "express": "4.18.1",
-        "jsonwebtoken": "8.5.1",
+        "jsonwebtoken": "9.0.0",
         "passport": "^0.6.0",
         "passport-jwt": "^4.0.0"
     },
diff --git a/steedos-packages/server-amis/package.json b/steedos-packages/server-amis/package.json
index a798023056..97f72fff97 100644
--- a/steedos-packages/server-amis/package.json
+++ b/steedos-packages/server-amis/package.json
@@ -21,7 +21,7 @@
     "clsx": "^1.1.1",
     "express": "^4.18.1",
     "focus-visible": "^5.2.0",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.21",
     "next": "latest",
     "next-auth": "4.10.3",
diff --git a/yarn.lock b/yarn.lock
index 779dc0d063..9ccee76259 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -13909,6 +13909,16 @@ jsonwebtoken@8.5.1, jsonwebtoken@^8.2.0, jsonwebtoken@^8.5.1:
     ms "^2.1.1"
     semver "^5.6.0"
 
+jsonwebtoken@9.0.0, jsonwebtoken@^9.0.0:
+  version "9.0.0"
+  resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-9.0.0.tgz#d0faf9ba1cc3a56255fe49c0961a67e520c1926d"
+  integrity sha512-tuGfYXxkQGDPnLJ7SibiQgVgeDgfbPq2k2ICcbgqW8WxWLBAxKQM/ZCu/IT8SOSwmaYl4dpTFCW5xZv7YbbWUw==
+  dependencies:
+    jws "^3.2.2"
+    lodash "^4.17.21"
+    ms "^2.1.1"
+    semver "^7.3.8"
+
 jsprim@^1.2.2:
   version "1.4.2"
   resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.2.tgz#712c65533a15c878ba59e9ed5f0e26d5b77c5feb"