diff --git a/package-lock.json b/package-lock.json
index 03b8438c5a..2055753269 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -38,11 +38,11 @@
         "mime": "3.0.0",
         "mongodb": "4.10.0",
         "mustache": "4.2.0",
-        "otpauth": "9.2.2",
+        "otpauth": "^9.3.4",
         "parse": "4.2.0",
         "path-to-regexp": "6.2.2",
         "pg-monitor": "2.0.0",
-        "pg-promise": "^11.9.1",
+        "pg-promise": "11.9.1",
         "pluralize": "8.0.0",
         "rate-limit-redis": "3.0.2",
         "redis": "4.6.13",
@@ -2651,6 +2651,18 @@
         "eslint-scope": "5.1.1"
       }
     },
+    "node_modules/@noble/hashes": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.5.0.tgz",
+      "integrity": "sha512-1j6kQFb7QRru7eKN3ZDvRcP13rugwdxZqCjbiAVZfIJwgj2A65UmT4TgARXGlXgnRkORLTDTrO19ZErt7+QXgA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@node-rs/bcrypt": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@node-rs/bcrypt/-/bcrypt-1.1.0.tgz",
@@ -10959,14 +10971,6 @@
         "extsprintf": "^1.2.0"
       }
     },
-    "node_modules/jssha": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/jssha/-/jssha-3.3.1.tgz",
-      "integrity": "sha512-VCMZj12FCFMQYcFLPRm/0lOBbLi8uM2BhXPTqw3U4YAfs4AZfiApOoBLoN8cQE60Z50m1MYMTQVCfgF/KaCVhQ==",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/jwa": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
@@ -16694,11 +16698,12 @@
       }
     },
     "node_modules/otpauth": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.2.2.tgz",
-      "integrity": "sha512-2VcnYRUmq1dNckIfySNYP32ITWp1bvTeAEW0BSCR6G3GBf3a5zb9E+ubY62t3Dma9RjoHlvd7QpmzHfJZRkiNg==",
+      "version": "9.3.4",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.3.4.tgz",
+      "integrity": "sha512-qXv+lpsCUO9ewitLYfeDKbLYt7UUCivnU/fwGK2OqhgrCBsRkTUNKWsgKAhkXG3aistOY+jEeuL90JEBu6W3mQ==",
+      "license": "MIT",
       "dependencies": {
-        "jssha": "~3.3.1"
+        "@noble/hashes": "1.5.0"
       },
       "funding": {
         "url": "https://github.com/hectorm/otpauth?sponsor=1"
@@ -23606,6 +23611,11 @@
         "eslint-scope": "5.1.1"
       }
     },
+    "@noble/hashes": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.5.0.tgz",
+      "integrity": "sha512-1j6kQFb7QRru7eKN3ZDvRcP13rugwdxZqCjbiAVZfIJwgj2A65UmT4TgARXGlXgnRkORLTDTrO19ZErt7+QXgA=="
+    },
     "@node-rs/bcrypt": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@node-rs/bcrypt/-/bcrypt-1.1.0.tgz",
@@ -30043,11 +30053,6 @@
         }
       }
     },
-    "jssha": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/jssha/-/jssha-3.3.1.tgz",
-      "integrity": "sha512-VCMZj12FCFMQYcFLPRm/0lOBbLi8uM2BhXPTqw3U4YAfs4AZfiApOoBLoN8cQE60Z50m1MYMTQVCfgF/KaCVhQ=="
-    },
     "jwa": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
@@ -34355,11 +34360,11 @@
       }
     },
     "otpauth": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.2.2.tgz",
-      "integrity": "sha512-2VcnYRUmq1dNckIfySNYP32ITWp1bvTeAEW0BSCR6G3GBf3a5zb9E+ubY62t3Dma9RjoHlvd7QpmzHfJZRkiNg==",
+      "version": "9.3.4",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-9.3.4.tgz",
+      "integrity": "sha512-qXv+lpsCUO9ewitLYfeDKbLYt7UUCivnU/fwGK2OqhgrCBsRkTUNKWsgKAhkXG3aistOY+jEeuL90JEBu6W3mQ==",
       "requires": {
-        "jssha": "~3.3.1"
+        "@noble/hashes": "1.5.0"
       }
     },
     "p-cancelable": {
diff --git a/package.json b/package.json
index 864560d53b..d0f568518c 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
     "mime": "3.0.0",
     "mongodb": "4.10.0",
     "mustache": "4.2.0",
-    "otpauth": "9.2.2",
+    "otpauth": "9.3.4",
     "parse": "4.2.0",
     "path-to-regexp": "6.2.2",
     "pg-monitor": "2.0.0",