diff --git a/packages/netlify-cms-backend-git-gateway/package.json b/packages/netlify-cms-backend-git-gateway/package.json
index d04e7e12..04fa35ac 100644
--- a/packages/netlify-cms-backend-git-gateway/package.json
+++ b/packages/netlify-cms-backend-git-gateway/package.json
@@ -23,7 +23,7 @@
   "dependencies": {
     "gotrue-js": "^0.9.24",
     "ini": "^1.3.5",
-    "jwt-decode": "^2.2.0",
+    "jwt-decode": "^3.0.0",
     "minimatch": "^3.0.4"
   },
   "peerDependencies": {
diff --git a/packages/netlify-cms-core/package.json b/packages/netlify-cms-core/package.json
index 01405bdc..56084d97 100644
--- a/packages/netlify-cms-core/package.json
+++ b/packages/netlify-cms-core/package.json
@@ -38,7 +38,7 @@
     "history": "^4.7.2",
     "immer": "^7.0.0",
     "js-base64": "^3.0.0",
-    "jwt-decode": "^2.1.0",
+    "jwt-decode": "^3.0.0",
     "node-polyglot": "^2.3.0",
     "prop-types": "^15.7.2",
     "react": "^16.8.4",
diff --git a/yarn.lock b/yarn.lock
index ef94c528..dbc777c3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11328,10 +11328,10 @@ jsx-ast-utils@^2.4.1:
     array-includes "^3.1.1"
     object.assign "^4.1.0"
 
-jwt-decode@^2.1.0, jwt-decode@^2.2.0:
-  version "2.2.0"
-  resolved "https://registry.yarnpkg.com/jwt-decode/-/jwt-decode-2.2.0.tgz#7d86bd56679f58ce6a84704a657dd392bba81a79"
-  integrity sha1-fYa9VmefWM5qhHBKZX3TkruoGnk=
+jwt-decode@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/jwt-decode/-/jwt-decode-3.0.0.tgz#d9a17ddf6d37c03bf037b0b27cf8756cfd01c5c7"
+  integrity sha512-RBQv2MTm3FNKQkdzhEyQwh5MbdNgMa+FyIJIK5RMWEn6hRgRHr7j55cRxGhRe6vGJDElyi6f6u/yfkP7AoXddA==
 
 keyv@^3.0.0:
   version "3.1.0"