diff --git a/package-lock.json b/package-lock.json
index 86bc12b1..cd5532dd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -39,7 +39,7 @@
         "mime": "3.0.0",
         "mongodb": "5.9.0",
         "mustache": "4.2.0",
-        "otpauth": "9.2.2",
+        "otpauth": "9.3.1",
         "parse": "5.3.0",
         "path-to-regexp": "6.2.1",
         "pg-monitor": "2.1.0",
@@ -3318,6 +3318,17 @@
         "eslint-scope": "5.1.1"
       }
     },
+    "node_modules/@noble/hashes": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.4.0.tgz",
+      "integrity": "sha512-V1JJ1WTRUqHHrOSh597hURcMqVKVGL/ea3kv0gSnEdsEZ0/+VyPghM1lMNGc00z7CIQorSvbKpuJkxvuHbvdbg==",
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@node-rs/bcrypt": {
       "version": "1.10.4",
       "resolved": "https://registry.npmjs.org/@node-rs/bcrypt/-/bcrypt-1.10.4.tgz",
@@ -11878,14 +11889,6 @@
         "extsprintf": "^1.2.0"
       }
     },
-    "node_modules/jssha": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/jssha/-/jssha-3.3.1.tgz",
-      "integrity": "sha512-VCMZj12FCFMQYcFLPRm/0lOBbLi8uM2BhXPTqw3U4YAfs4AZfiApOoBLoN8cQE60Z50m1MYMTQVCfgF/KaCVhQ==",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/jwa": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
@@ -16829,11 +16832,11 @@
       }
     },
     "node_modules/otpauth": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.2.2.tgz",
-      "integrity": "sha512-2VcnYRUmq1dNckIfySNYP32ITWp1bvTeAEW0BSCR6G3GBf3a5zb9E+ubY62t3Dma9RjoHlvd7QpmzHfJZRkiNg==",
+      "version": "9.3.1",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.3.1.tgz",
+      "integrity": "sha512-E6d2tMxPofHNk4sRFp+kqW7vQ+WJGO9VLI2N/W00DnI+ThskU12Qa10kyNSGklrzhN5c+wRUsN4GijVgCU2N9w==",
       "dependencies": {
-        "jssha": "~3.3.1"
+        "@noble/hashes": "1.4.0"
       },
       "funding": {
         "url": "https://github.com/hectorm/otpauth?sponsor=1"
@@ -23568,6 +23571,11 @@
         "eslint-scope": "5.1.1"
       }
     },
+    "@noble/hashes": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.4.0.tgz",
+      "integrity": "sha512-V1JJ1WTRUqHHrOSh597hURcMqVKVGL/ea3kv0gSnEdsEZ0/+VyPghM1lMNGc00z7CIQorSvbKpuJkxvuHbvdbg=="
+    },
     "@node-rs/bcrypt": {
       "version": "1.10.4",
       "resolved": "https://registry.npmjs.org/@node-rs/bcrypt/-/bcrypt-1.10.4.tgz",
@@ -29773,11 +29781,6 @@
         }
       }
     },
-    "jssha": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/jssha/-/jssha-3.3.1.tgz",
-      "integrity": "sha512-VCMZj12FCFMQYcFLPRm/0lOBbLi8uM2BhXPTqw3U4YAfs4AZfiApOoBLoN8cQE60Z50m1MYMTQVCfgF/KaCVhQ=="
-    },
     "jwa": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
@@ -33266,11 +33269,11 @@
       }
     },
     "otpauth": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.2.2.tgz",
-      "integrity": "sha512-2VcnYRUmq1dNckIfySNYP32ITWp1bvTeAEW0BSCR6G3GBf3a5zb9E+ubY62t3Dma9RjoHlvd7QpmzHfJZRkiNg==",
+      "version": "9.3.1",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.3.1.tgz",
+      "integrity": "sha512-E6d2tMxPofHNk4sRFp+kqW7vQ+WJGO9VLI2N/W00DnI+ThskU12Qa10kyNSGklrzhN5c+wRUsN4GijVgCU2N9w==",
       "requires": {
-        "jssha": "~3.3.1"
+        "@noble/hashes": "1.4.0"
       }
     },
     "p-cancelable": {
diff --git a/package.json b/package.json
index 861b1ed3..e142ba46 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "mime": "3.0.0",
     "mongodb": "5.9.0",
     "mustache": "4.2.0",
-    "otpauth": "9.2.2",
+    "otpauth": "9.3.1",
     "parse": "5.3.0",
     "path-to-regexp": "6.2.1",
     "pg-monitor": "2.1.0",