diff --git a/.changeset/lovely-donkeys-kneel.md b/.changeset/lovely-donkeys-kneel.md
new file mode 100644
index 0000000000..e6c45c59fa
--- /dev/null
+++ b/.changeset/lovely-donkeys-kneel.md
@@ -0,0 +1,13 @@
+---
+'@backstage/plugin-auth-backend-module-oauth2-proxy-provider': patch
+'@backstage/plugin-auth-backend-module-vmware-cloud-provider': patch
+'@backstage/plugin-auth-backend-module-microsoft-provider': patch
+'@backstage/plugin-auth-backend-module-pinniped-provider': patch
+'@backstage/plugin-auth-backend-module-aws-alb-provider': patch
+'@backstage/plugin-auth-backend-module-oidc-provider': patch
+'@backstage/backend-common': patch
+'@backstage/plugin-auth-backend': patch
+'@backstage/plugin-auth-node': patch
+---
+
+Bump dependency `jose` to v5
diff --git a/packages/backend-common/package.json b/packages/backend-common/package.json
index 64ff9e8dc4..d202b19040 100644
--- a/packages/backend-common/package.json
+++ b/packages/backend-common/package.json
@@ -87,7 +87,7 @@
     "git-url-parse": "^14.0.0",
     "helmet": "^6.0.0",
     "isomorphic-git": "^1.23.0",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "keyv": "^4.5.2",
     "knex": "^3.0.0",
     "lodash": "^4.17.21",
diff --git a/plugins/auth-backend-module-aws-alb-provider/package.json b/plugins/auth-backend-module-aws-alb-provider/package.json
index 3be75b5f07..e79b1b8f61 100644
--- a/plugins/auth-backend-module-aws-alb-provider/package.json
+++ b/plugins/auth-backend-module-aws-alb-provider/package.json
@@ -37,7 +37,7 @@
     "@backstage/errors": "workspace:^",
     "@backstage/plugin-auth-backend": "workspace:^",
     "@backstage/plugin-auth-node": "workspace:^",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "node-cache": "^5.1.2",
     "node-fetch": "^2.6.7"
   },
diff --git a/plugins/auth-backend-module-microsoft-provider/package.json b/plugins/auth-backend-module-microsoft-provider/package.json
index dcd069d479..028b77f88a 100644
--- a/plugins/auth-backend-module-microsoft-provider/package.json
+++ b/plugins/auth-backend-module-microsoft-provider/package.json
@@ -31,7 +31,7 @@
     "@backstage/backend-plugin-api": "workspace:^",
     "@backstage/plugin-auth-node": "workspace:^",
     "express": "^4.18.2",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "lodash": "^4.17.21",
     "node-fetch": "^2.6.7",
     "passport": "^0.7.0",
diff --git a/plugins/auth-backend-module-oauth2-proxy-provider/package.json b/plugins/auth-backend-module-oauth2-proxy-provider/package.json
index b0bca5a488..26e2f0d4ff 100644
--- a/plugins/auth-backend-module-oauth2-proxy-provider/package.json
+++ b/plugins/auth-backend-module-oauth2-proxy-provider/package.json
@@ -31,7 +31,7 @@
     "@backstage/backend-plugin-api": "workspace:^",
     "@backstage/errors": "workspace:^",
     "@backstage/plugin-auth-node": "workspace:^",
-    "jose": "^4.6.0"
+    "jose": "^5.0.0"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/plugins/auth-backend-module-oidc-provider/package.json b/plugins/auth-backend-module-oidc-provider/package.json
index 57f2f19683..24cad9cec4 100644
--- a/plugins/auth-backend-module-oidc-provider/package.json
+++ b/plugins/auth-backend-module-oidc-provider/package.json
@@ -44,7 +44,7 @@
     "cookie-parser": "^1.4.6",
     "express-promise-router": "^4.1.1",
     "express-session": "^1.17.3",
-    "jose": "^4.14.6",
+    "jose": "^5.0.0",
     "msw": "^1.3.1",
     "supertest": "^6.3.3"
   },
diff --git a/plugins/auth-backend-module-pinniped-provider/package.json b/plugins/auth-backend-module-pinniped-provider/package.json
index 0fcc0a953c..9581cb132b 100644
--- a/plugins/auth-backend-module-pinniped-provider/package.json
+++ b/plugins/auth-backend-module-pinniped-provider/package.json
@@ -42,7 +42,7 @@
     "cookie-parser": "^1.4.6",
     "express": "^4.18.2",
     "express-session": "^1.17.3",
-    "jose": "^4.14.6",
+    "jose": "^5.0.0",
     "msw": "^1.3.0",
     "passport": "^0.7.0",
     "supertest": "^6.3.3"
diff --git a/plugins/auth-backend-module-vmware-cloud-provider/package.json b/plugins/auth-backend-module-vmware-cloud-provider/package.json
index 1ccf42d487..c534f461e4 100644
--- a/plugins/auth-backend-module-vmware-cloud-provider/package.json
+++ b/plugins/auth-backend-module-vmware-cloud-provider/package.json
@@ -32,7 +32,7 @@
     "@backstage/catalog-model": "workspace:^",
     "@backstage/plugin-auth-node": "workspace:^",
     "@types/passport-oauth2": "^1.4.15",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "passport-oauth2": "^1.6.1"
   },
   "devDependencies": {
diff --git a/plugins/auth-backend/package.json b/plugins/auth-backend/package.json
index 8a28192e43..1af2658dcf 100644
--- a/plugins/auth-backend/package.json
+++ b/plugins/auth-backend/package.json
@@ -65,7 +65,7 @@
     "express-session": "^1.17.1",
     "fs-extra": "^11.2.0",
     "google-auth-library": "^9.0.0",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "knex": "^3.0.0",
     "lodash": "^4.17.21",
     "luxon": "^3.0.0",
diff --git a/plugins/auth-node/package.json b/plugins/auth-node/package.json
index d619902467..42905a7af5 100644
--- a/plugins/auth-node/package.json
+++ b/plugins/auth-node/package.json
@@ -38,7 +38,7 @@
     "@types/express": "*",
     "@types/passport": "^1.0.3",
     "express": "^4.17.1",
-    "jose": "^4.6.0",
+    "jose": "^5.0.0",
     "lodash": "^4.17.21",
     "node-fetch": "^2.6.7",
     "passport": "^0.7.0",
diff --git a/yarn.lock b/yarn.lock
index 21507fc0b4..6947f988b0 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3321,7 +3321,7 @@ __metadata:
     helmet: ^6.0.0
     http-errors: ^2.0.0
     isomorphic-git: ^1.23.0
-    jose: ^4.6.0
+    jose: ^5.0.0
     keyv: ^4.5.2
     knex: ^3.0.0
     lodash: ^4.17.21
@@ -4611,7 +4611,7 @@ __metadata:
     "@backstage/plugin-auth-backend": "workspace:^"
     "@backstage/plugin-auth-node": "workspace:^"
     express: ^4.18.2
-    jose: ^4.6.0
+    jose: ^5.0.0
     msw: ^2.0.8
     node-cache: ^5.1.2
     node-fetch: ^2.6.7
@@ -4694,7 +4694,7 @@ __metadata:
     "@backstage/plugin-auth-node": "workspace:^"
     "@types/passport-microsoft": ^1.0.0
     express: ^4.18.2
-    jose: ^4.6.0
+    jose: ^5.0.0
     lodash: ^4.17.21
     msw: ^1.0.0
     node-fetch: ^2.6.7
@@ -4729,7 +4729,7 @@ __metadata:
     "@backstage/cli": "workspace:^"
     "@backstage/errors": "workspace:^"
     "@backstage/plugin-auth-node": "workspace:^"
-    jose: ^4.6.0
+    jose: ^5.0.0
   languageName: unknown
   linkType: soft
 
@@ -4749,7 +4749,7 @@ __metadata:
     express: ^4.18.2
     express-promise-router: ^4.1.1
     express-session: ^1.17.3
-    jose: ^4.14.6
+    jose: ^5.0.0
     msw: ^1.3.1
     openid-client: ^5.5.0
     passport: ^0.7.0
@@ -4788,7 +4788,7 @@ __metadata:
     cookie-parser: ^1.4.6
     express: ^4.18.2
     express-session: ^1.17.3
-    jose: ^4.14.6
+    jose: ^5.0.0
     luxon: ^3.4.3
     msw: ^1.3.0
     openid-client: ^5.4.3
@@ -4811,7 +4811,7 @@ __metadata:
     "@backstage/plugin-auth-backend": "workspace:^"
     "@backstage/plugin-auth-node": "workspace:^"
     "@types/passport-oauth2": ^1.4.15
-    jose: ^4.6.0
+    jose: ^5.0.0
     msw: ^2.0.8
     passport-oauth2: ^1.6.1
     supertest: ^6.3.3
@@ -4868,7 +4868,7 @@ __metadata:
     express-session: ^1.17.1
     fs-extra: ^11.2.0
     google-auth-library: ^9.0.0
-    jose: ^4.6.0
+    jose: ^5.0.0
     knex: ^3.0.0
     lodash: ^4.17.21
     luxon: ^3.0.0
@@ -4911,7 +4911,7 @@ __metadata:
     cookie-parser: ^1.4.6
     express: ^4.17.1
     express-promise-router: ^4.1.1
-    jose: ^4.6.0
+    jose: ^5.0.0
     lodash: ^4.17.21
     msw: ^1.0.0
     node-fetch: ^2.6.7
@@ -32120,13 +32120,20 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jose@npm:^4.14.6, jose@npm:^4.15.4, jose@npm:^4.6.0":
+"jose@npm:^4.15.4":
   version: 4.15.4
   resolution: "jose@npm:4.15.4"
   checksum: dccad91cb3357f36423774a0b89ad830dd84b31090de65cd139b85488439f16a00f8c59c0773825e8a1adb0dd9d13ad725ad66e6ea33880ecb3959bb99e1ea5b
   languageName: node
   linkType: hard
 
+"jose@npm:^5.0.0":
+  version: 5.2.2
+  resolution: "jose@npm:5.2.2"
+  checksum: d23def3c1df8aae1ae59d1c027a073804034fe8b971dafe51f0452ca8f6eb7e5cd3e3c90b6e544776443e01e58c8f8eefbd1984dbcde378e693e0ebbd176584d
+  languageName: node
+  linkType: hard
+
 "joycon@npm:^3.0.1":
   version: 3.1.0
   resolution: "joycon@npm:3.1.0"