diff --git a/appengine/pubsub/package.json b/appengine/pubsub/package.json
index 3f30ddb44f..40e6ac8ff1 100644
--- a/appengine/pubsub/package.json
+++ b/appengine/pubsub/package.json
@@ -22,7 +22,7 @@
     "wait-port": "^0.2.9"
   },
   "devDependencies": {
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "chai": "^4.2.0",
     "mocha": "^10.1.0",
     "sinon": "^9.0.3",