diff --git a/package-lock.json b/package-lock.json
index d7c4532a..d8867a74 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,7 +22,7 @@
         "multer": "^2.1.1",
         "nodemailer": "^8.0.2",
         "nunjucks": "^3.2.4",
-        "otpauth": "^9.5.0",
+        "otpauth": "^9.5.1",
         "pino": "^9.5.0",
         "pino-pretty": "^13.0.0",
         "qrcode": "^1.5.4",
@@ -980,9 +980,10 @@
       }
     },
     "node_modules/@noble/hashes": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.0.1.tgz",
-      "integrity": "sha512-XlOlEbQcE9fmuXxrVTXCTlG2nlRXa9Rj3rr5Ue/+tX+nmkgbX720YHh0VR3hBF9xDvwnb8D2shVGOwNx+ulArw==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.2.0.tgz",
+      "integrity": "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==",
+      "license": "MIT",
       "engines": {
         "node": ">= 20.19.0"
       },
@@ -2956,11 +2957,12 @@
       }
     },
     "node_modules/otpauth": {
-      "version": "9.5.0",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.5.0.tgz",
-      "integrity": "sha512-Ldhc6UYl4baR5toGr8nfKC+L/b8/RgHKoIixAebgoNGzUUCET02g04rMEZ2ZsPfeVQhMHcuaOgb28nwMr81zCA==",
+      "version": "9.5.1",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.5.1.tgz",
+      "integrity": "sha512-fJmDAHc8wImfqqqOXIlBvT1dEKrZK0Cmb2VEgScpNTolCz0PHh6ExUZGv4sLtOsWNaHCQlD+rRqaPgnoxFoZjQ==",
+      "license": "MIT",
       "dependencies": {
-        "@noble/hashes": "2.0.1"
+        "@noble/hashes": "2.2.0"
       },
       "funding": {
         "url": "https://github.com/hectorm/otpauth?sponsor=1"
diff --git a/package.json b/package.json
index 0abaad54..bb19ce96 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "multer": "^2.1.1",
     "nodemailer": "^8.0.2",
     "nunjucks": "^3.2.4",
-    "otpauth": "^9.5.0",
+    "otpauth": "^9.5.1",
     "pino": "^9.5.0",
     "pino-pretty": "^13.0.0",
     "qrcode": "^1.5.4",