diff --git a/middleware/package-lock.json b/middleware/package-lock.json
index 7678bcecf..14ee80d7a 100644
--- a/middleware/package-lock.json
+++ b/middleware/package-lock.json
@@ -15,7 +15,7 @@
       "dependencies": {
         "@anthropic-ai/sdk": "^0.115.0",
         "@aws-sdk/client-s3": "^3.1075.0",
-        "@azure/msal-node": "^5.3.1",
+        "@azure/msal-node": "^5.4.3",
         "@microsoft/microsoft-graph-client": "^3.0.7",
         "@types/better-sqlite3": "^7.6.13",
         "@types/cookie": "^0.6.0",
@@ -24,7 +24,7 @@
         "@types/yauzl": "^3.4.0",
         "argon2": "^0.45.1",
         "better-sqlite3": "^12.11.1",
-        "bonjour-service": "^1.4.3",
+        "bonjour-service": "^1.4.4",
         "botbuilder": "^4.23.3",
         "cookie": "^0.7.2",
         "cookie-parser": "^1.4.7",
@@ -32,7 +32,7 @@
         "dotenv": "^17.4.2",
         "eslint": "^10.6.0",
         "express": "^5.2.1",
-        "jose": "^6.2.4",
+        "jose": "^6.2.5",
         "multer": "^2.1.1",
         "openai": "^6.46.0",
         "pg": "^8.21.0",
@@ -554,18 +554,27 @@
       }
     },
     "node_modules/@azure/msal-node": {
-      "version": "5.4.2",
-      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.4.2.tgz",
-      "integrity": "sha512-fnqOpGYAV+i0RH4W5HB6Oy1IhqGZoCdnp7Y2Sa9k18FlT8aBkCA7L8Hv19hUHLDUK6kVjUO29AfnGX6wgAHyNg==",
+      "version": "5.4.3",
+      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.4.3.tgz",
+      "integrity": "sha512-tumCMmzrRhKmTbYQg/7OlfbrIKcKaf8Ed0Fw3suUpRT3owFYljznVgxcfHe8RycQXY9uyROGiLD1GjhpF45AwA==",
       "license": "MIT",
       "dependencies": {
-        "@azure/msal-common": "16.11.2",
+        "@azure/msal-common": "16.11.3",
         "jsonwebtoken": "^9.0.0"
       },
       "engines": {
         "node": ">=20"
       }
     },
+    "node_modules/@azure/msal-node/node_modules/@azure/msal-common": {
+      "version": "16.11.3",
+      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-16.11.3.tgz",
+      "integrity": "sha512-VeXOW+t3Rdd9XGX6lVyIg3DhtjMR1JD8ARKcsnGbJFUWwAmF3sHL7GwZc/ZjEUfHESResAonETRYCuG06OBT7A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.8.0"
+      }
+    },
     "node_modules/@babel/runtime": {
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz",
@@ -3721,9 +3730,9 @@
       }
     },
     "node_modules/bonjour-service": {
-      "version": "1.4.3",
-      "resolved": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.4.3.tgz",
-      "integrity": "sha512-2Kd5UYlFUVgAKMTyuBLl6w49wqfOnbxHqmuH0oCl/n7TfAikR0zoowNOP5BU4dfXmm+Vr9JyEN370auSMx+CNg==",
+      "version": "1.4.4",
+      "resolved": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.4.4.tgz",
+      "integrity": "sha512-jCZcVv7eoc4QesRscwEZtSROBen+6LpKAmBIsQYQrsAeVHLyMXWX/t6eIV5KiRZYNUBl8eVqImEEMQ8L5+c/Kw==",
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
@@ -6003,9 +6012,9 @@
       "license": "ISC"
     },
     "node_modules/jose": {
-      "version": "6.2.4",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.4.tgz",
-      "integrity": "sha512-N8acGzVsQy6M/fjFcxtysNc4Q379TcM5dM/qKkNtsHFji88yANnXTr7BLeP75iPnFwBfQzM/jg2BZ9+HZrHCZA==",
+      "version": "6.2.5",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.5.tgz",
+      "integrity": "sha512-2E5L2yRp03FnwreJLJX8/r7mHiZICCf8kG7fAsTWkSQTDAcc46NIZoQLKy+EJ8sPoJlxyS4OQR5H70LjIZZlIQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/middleware/package.json b/middleware/package.json
index 9fdca3bb2..1e8b1a918 100644
--- a/middleware/package.json
+++ b/middleware/package.json
@@ -48,7 +48,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^0.115.0",
     "@aws-sdk/client-s3": "^3.1075.0",
-    "@azure/msal-node": "^5.3.1",
+    "@azure/msal-node": "^5.4.3",
     "@microsoft/microsoft-graph-client": "^3.0.7",
     "@types/better-sqlite3": "^7.6.13",
     "@types/cookie": "^0.6.0",
@@ -57,7 +57,7 @@
     "@types/yauzl": "^3.4.0",
     "argon2": "^0.45.1",
     "better-sqlite3": "^12.11.1",
-    "bonjour-service": "^1.4.3",
+    "bonjour-service": "^1.4.4",
     "botbuilder": "^4.23.3",
     "cookie": "^0.7.2",
     "cookie-parser": "^1.4.7",
@@ -65,7 +65,7 @@
     "dotenv": "^17.4.2",
     "eslint": "^10.6.0",
     "express": "^5.2.1",
-    "jose": "^6.2.4",
+    "jose": "^6.2.5",
     "multer": "^2.1.1",
     "openai": "^6.46.0",
     "pg": "^8.21.0",