diff --git a/services/api/src/Vorespant.Api/Vorespant.Api.csproj b/services/api/src/Vorespant.Api/Vorespant.Api.csproj
index b6a3b01..c95f22c 100644
--- a/services/api/src/Vorespant.Api/Vorespant.Api.csproj
+++ b/services/api/src/Vorespant.Api/Vorespant.Api.csproj
@@ -9,7 +9,7 @@
 
   <ItemGroup>
     <!-- Serilog / OpenTelemetry / App Insights packages are owned by Vorespant.Observability -->
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.10" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.26" />
     <PackageReference Include="Microsoft.Identity.Web" Version="3.8.2" />
     <PackageReference Include="Azure.Identity" Version="1.13.1" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="6.8.1" />