diff --git a/package-lock.json b/package-lock.json
index ca9179404..752e7b2f2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -28,7 +28,7 @@
         "inquirer": "12.9.0",
         "js-beautify": "1.15.4",
         "node-fetch": "3.3.2",
-        "otpauth": "8.0.3",
+        "otpauth": "9.4.1",
         "package-json": "7.0.0",
         "parse": "7.1.2",
         "passport": "0.7.0",
@@ -3960,6 +3960,18 @@
         "eslint-scope": "5.1.1"
       }
     },
+    "node_modules/@noble/hashes": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
+      "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
+      "license": "MIT",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@nodelib/fs.scandir": {
       "version": "2.1.5",
       "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
@@ -15940,14 +15952,6 @@
         "node": ">=0.6.0"
       }
     },
-    "node_modules/jssha": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/jssha/-/jssha-3.2.0.tgz",
-      "integrity": "sha512-QuruyBENDWdN4tZwJbQq7/eAK85FqrI4oDbXjy5IBhYD+2pTJyBUWZe8ctWaCkrV0gy6AaelgOZZBMeswEa/6Q==",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/jsx-ast-utils": {
       "version": "3.3.3",
       "resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.3.tgz",
@@ -19864,11 +19868,15 @@
       }
     },
     "node_modules/otpauth": {
-      "version": "8.0.3",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-8.0.3.tgz",
-      "integrity": "sha512-5abBweT/POpMdVuM0Zk/tvlTHw8Kc8606XX/w8QNLRBDib+FVpseAx12Z21/iVIeCrJOgCY1dBuLS057IOdybw==",
+      "version": "9.4.1",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.4.1.tgz",
+      "integrity": "sha512-+iVvys36CFsyXEqfNftQm1II7SW23W1wx9RwNk0Cd97lbvorqAhBDksb/0bYry087QMxjiuBS0wokdoZ0iUeAw==",
+      "license": "MIT",
       "dependencies": {
-        "jssha": "~3.2.0"
+        "@noble/hashes": "1.8.0"
+      },
+      "funding": {
+        "url": "https://github.com/hectorm/otpauth?sponsor=1"
       }
     },
     "node_modules/own-keys": {
diff --git a/package.json b/package.json
index 8ac0d2926..d47fa8134 100644
--- a/package.json
+++ b/package.json
@@ -55,7 +55,7 @@
     "inquirer": "12.9.0",
     "js-beautify": "1.15.4",
     "node-fetch": "3.3.2",
-    "otpauth": "8.0.3",
+    "otpauth": "9.4.1",
     "package-json": "7.0.0",
     "parse": "7.1.2",
     "passport": "0.7.0",