diff --git a/pyproject.toml b/pyproject.toml
index d513aacf..a8572bc3 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -52,7 +52,7 @@ jinja = ["Jinja2~=3.1.6"]
 xml = ["defusedxml>=0.7.1"]
 full = [
     "cryptography>=45.0.2,<47.0.0",
-    "PyJWT>=2.10.1,<2.13.0",
+    "PyJWT>=2.10.1,<2.14.0",
     "websockets~=15.0.1",
     "Jinja2~=3.1.6",
     "defusedxml>=0.7.1",
diff --git a/requirements.pypy.txt b/requirements.pypy.txt
index 9d96f779..7edb534a 100644
--- a/requirements.pypy.txt
+++ b/requirements.pypy.txt
@@ -7,7 +7,7 @@ itsdangerous~=2.2.0
 cryptography>=45.0.2,<47.0.0
 h11==0.16.0
 Jinja2~=3.1.6
-PyJWT==2.12.0
+PyJWT==2.13.0
 websockets~=15.0.1
 # For tests:
 Flask[async]==3.1.1
diff --git a/requirements.txt b/requirements.txt
index 84d646c1..7e322001 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,7 +8,7 @@ cryptography>=45.0.2,<47.0.0
 h11==0.16.0
 h2>=4.0.0,<5.0.0
 Jinja2~=3.1.6
-PyJWT==2.12.0
+PyJWT==2.13.0
 websockets~=15.0.1
 httptools==0.6.4
 async-timeout>=4.0.0; python_version < '3.11'