diff --git a/Cargo.lock b/Cargo.lock
index d1cc2ed1..f0503997 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6046,7 +6046,7 @@ dependencies = [
  "hiver-runtime",
  "hmac 0.12.1",
  "http 1.4.1",
- "jsonwebtoken 10.3.0",
+ "jsonwebtoken 11.0.0",
  "md-5 0.11.0",
  "once_cell",
  "rand 0.9.4",
@@ -7158,9 +7158,9 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "10.3.0"
+version = "11.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0529410abe238729a60b108898784df8984c87f6054c9c4fcacc47e4803c1ce1"
+checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
 dependencies = [
  "aws-lc-rs",
  "base64 0.22.1",
@@ -7171,6 +7171,7 @@ dependencies = [
  "serde_json",
  "signature",
  "simple_asn1",
+ "zeroize",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 695f1254..a93bc3ee 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -223,7 +223,7 @@ tokio-postgres = "0.7.18"
 # Security / 安全
 # Equivalent to: Spring Security
 # Using aws_lc_rs feature for crypto (secure alternative to rust_crypto)
-jsonwebtoken = { version = "10.3", features = ["aws_lc_rs"] }
+jsonwebtoken = { version = "11.0", features = ["aws_lc_rs"] }
 bcrypt = "0.18.0"
 rand = "0.9.3"
 hmac = "0.12"