diff --git a/backend/package.json b/backend/package.json
index 05e5e10..2e78722 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -44,7 +44,7 @@
     "drizzle-orm": "^0.45.2",
     "express": "^5.2.1",
     "ioredis": "^5.11.1",
-    "iron-session": "^8.0.4",
+    "iron-session": "^9.0.1",
     "pdfkit": "^0.18.0",
     "prom-client": "^15.1.3",
     "react": "^19.2.8",
diff --git a/package-lock.json b/package-lock.json
index b6d149c..6935207 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -65,7 +65,7 @@
         "drizzle-orm": "^0.45.2",
         "express": "^5.2.1",
         "ioredis": "^5.11.1",
-        "iron-session": "^8.0.4",
+        "iron-session": "^9.0.1",
         "pdfkit": "^0.18.0",
         "prom-client": "^15.1.3",
         "react": "^19.2.8",
@@ -12481,25 +12481,43 @@
       }
     },
     "node_modules/iron-session": {
-      "version": "8.0.4",
-      "resolved": "https://registry.npmjs.org/iron-session/-/iron-session-8.0.4.tgz",
-      "integrity": "sha512-9ivNnaKOd08osD0lJ3i6If23GFS2LsxyMU8Gf/uBUEgm8/8CC1hrrCHFDpMo3IFbpBgwoo/eairRsaD3c5itxA==",
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/iron-session/-/iron-session-9.0.1.tgz",
+      "integrity": "sha512-ELSZdcLvA0AMhxUCY+rwKCh42UV88SqEb1ia/bHLF9G+6kScikO6mShtlIq+OtF2UlkZP0dmI2dMdG9vh4rebA==",
       "funding": [
         "https://github.com/sponsors/vvo",
         "https://github.com/sponsors/brc-dd"
       ],
       "license": "MIT",
       "dependencies": {
-        "cookie": "^0.7.2",
-        "iron-webcrypto": "^1.2.1",
-        "uncrypto": "^0.1.3"
+        "cookie": "^2.0.1",
+        "iron-webcrypto": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=22.13.0"
+      }
+    },
+    "node_modules/iron-session/node_modules/cookie": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-2.0.1.tgz",
+      "integrity": "sha512-yuToqVvRrj6pfDXREyQAAv8SkAEk/8GS3jQRTiUMm66TVtBYmqQeoEjL2Lmq8Rpo6271vH76InTChTitEAm65w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/iron-webcrypto": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/iron-webcrypto/-/iron-webcrypto-1.2.1.tgz",
-      "integrity": "sha512-feOM6FaSr6rEABp/eDfVseKyTMDt+KGpeB35SkVn9Tyn0CqvVsY3EwI0v5i8nMHyJnzCIQf7nsy3p41TPkJZhg==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/iron-webcrypto/-/iron-webcrypto-2.0.0.tgz",
+      "integrity": "sha512-rtffZKDUHciZElM8mjFCufBC7nVhCxHYyWHESqs89OioEDz4parOofd8/uhrejh/INhQFfYQfByS22LlezR9sQ==",
       "license": "MIT",
+      "dependencies": {
+        "uint8array-extras": "^1.5.0"
+      },
       "funding": {
         "url": "https://github.com/sponsors/brc-dd"
       }
@@ -17961,11 +17979,17 @@
         "typescript": ">=4.8.4 <6.1.0"
       }
     },
-    "node_modules/uncrypto": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/uncrypto/-/uncrypto-0.1.3.tgz",
-      "integrity": "sha512-Ql87qFHB3s/De2ClA9e0gsnS6zXG27SkTiSJwjCc9MebbfapQfuPzumMIUMi38ezPZVNFcHI9sUIepeQfw8J8Q==",
-      "license": "MIT"
+    "node_modules/uint8array-extras": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/uint8array-extras/-/uint8array-extras-1.6.0.tgz",
+      "integrity": "sha512-8iAasVS4wUx0gPLjH8Xtz2PeDzTSiy8QiLGu2DT3X5GU+egFEQhpnbtkehbAwjvDcxIERmCYcysiODFmE3Ud0Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
     },
     "node_modules/undici": {
       "version": "7.28.0",