diff --git a/composer.json b/composer.json
index dc597baf..b86a1c49 100644
--- a/composer.json
+++ b/composer.json
@@ -48,7 +48,7 @@
         "ext-openssl": "*",
         "lcobucci/clock": "^2.2|^3.0",
         "nyholm/psr7": "^1.5",
-        "paragonie/constant_time_encoding": "^2.6",
+        "paragonie/constant_time_encoding": "^2.6|^3.0",
         "phpdocumentor/reflection-docblock": "^5.3",
         "psr/clock": "^1.0",
         "psr/event-dispatcher": "^1.0",
diff --git a/src/metadata-service/composer.json b/src/metadata-service/composer.json
index d9881b7e..3bc891a7 100644
--- a/src/metadata-service/composer.json
+++ b/src/metadata-service/composer.json
@@ -23,7 +23,7 @@
         "php": ">=8.1",
         "ext-json": "*",
         "lcobucci/clock": "^2.2|^3.0",
-        "paragonie/constant_time_encoding": "^2.6",
+        "paragonie/constant_time_encoding": "^2.6|^3.0",
         "psr/clock": "^1.0",
         "psr/event-dispatcher": "^1.0",
         "psr/http-client": "^1.0",
diff --git a/src/webauthn/composer.json b/src/webauthn/composer.json
index acc54036..934318d3 100644
--- a/src/webauthn/composer.json
+++ b/src/webauthn/composer.json
@@ -24,7 +24,7 @@
         "ext-json": "*",
         "ext-openssl": "*",
         "ext-mbstring": "*",
-        "paragonie/constant_time_encoding": "^2.6",
+        "paragonie/constant_time_encoding": "^2.6|^3.0",
         "psr/event-dispatcher": "^1.0",
         "psr/http-client": "^1.0",
         "psr/http-factory": "^1.0",