diff --git a/.changeset/fast-lizards-fly.md b/.changeset/fast-lizards-fly.md
new file mode 100644
index 0000000000000..e6772b056f572
--- /dev/null
+++ b/.changeset/fast-lizards-fly.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Bump `passport-oauth2` to version 1.6.1
diff --git a/plugins/auth-backend/package.json b/plugins/auth-backend/package.json
index 171fb25dea477..0623b6ecd9105 100644
--- a/plugins/auth-backend/package.json
+++ b/plugins/auth-backend/package.json
@@ -65,7 +65,7 @@
     "passport-gitlab2": "^5.0.0",
     "passport-google-oauth20": "^2.0.0",
     "passport-microsoft": "^0.1.0",
-    "passport-oauth2": "^1.5.0",
+    "passport-oauth2": "^1.6.1",
     "passport-okta-oauth": "^0.0.1",
     "passport-onelogin-oauth": "^0.0.1",
     "passport-saml": "^3.1.2",
diff --git a/yarn.lock b/yarn.lock
index fa52c146c98de..7e276b56a30fe 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -18893,7 +18893,7 @@ passport-oauth2@1.2.0:
     passport-strategy "1.x.x"
     uid2 "0.0.x"
 
-passport-oauth2@1.x.x, passport-oauth2@^1.1.2, passport-oauth2@^1.4.0, passport-oauth2@^1.5.0:
+passport-oauth2@1.x.x, passport-oauth2@^1.1.2, passport-oauth2@^1.4.0, passport-oauth2@^1.6.1:
   version "1.6.1"
   resolved "https://registry.npmjs.org/passport-oauth2/-/passport-oauth2-1.6.1.tgz#c5aee8f849ce8bd436c7f81d904a3cd1666f181b"
   integrity sha512-ZbV43Hq9d/SBSYQ22GOiglFsjsD1YY/qdiptA+8ej+9C1dL1TVB+mBE5kDH/D4AJo50+2i8f4bx0vg4/yDDZCQ==