diff --git a/extensions-core/druid-pac4j/pom.xml b/extensions-core/druid-pac4j/pom.xml
index 63e85fa514f7..328c9b7a7bc3 100644
--- a/extensions-core/druid-pac4j/pom.xml
+++ b/extensions-core/druid-pac4j/pom.xml
@@ -39,7 +39,7 @@
     <!-- Following must be updated along with any updates to pac4j version. One can find the compatible version of nimbus libraries in org.pac4j:pac4j-oidc dependencies-->
     <nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
     <nimbus.jose.jwt.version>10.9.1</nimbus.jose.jwt.version>
-    <oauth2.oidc.sdk.version>10.8</oauth2.oidc.sdk.version>
+    <oauth2.oidc.sdk.version>11.38.2</oauth2.oidc.sdk.version>
   </properties>
 
   <dependencies>
diff --git a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
index 2e65beecb925..c961b78e5299 100644
--- a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
+++ b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
@@ -22,6 +22,7 @@
 import com.google.common.collect.ImmutableMap;
 import com.nimbusds.jose.JOSEException;
 import com.nimbusds.jose.proc.BadJOSEException;
+import com.nimbusds.oauth2.sdk.id.Audience;
 import com.nimbusds.oauth2.sdk.id.Issuer;
 import com.nimbusds.oauth2.sdk.id.Subject;
 import com.nimbusds.openid.connect.sdk.claims.IDTokenClaimsSet;
@@ -38,6 +39,7 @@
 import javax.servlet.http.HttpServletResponse;
 import java.io.IOException;
 import java.util.Collections;
+import java.util.Date;
 
 public class JwtAuthenticatorTest
 {
@@ -117,9 +119,9 @@ public void testValidClaim()
     EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(), EasyMock.anyObject()))
             .andReturn(new IDTokenClaimsSet(new Issuer("foo"),
                                             new Subject("testsub"),
-                                            Collections.emptyList(),
-                                            null,
-                                            null
+                                            Collections.singletonList(new Audience("testClient")),
+                                            new Date(1000),
+                                            new Date(0)
             ));
     EasyMock.replay(tokenValidator);
 
@@ -159,9 +161,9 @@ public void testEmptyClaim()
     EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(), EasyMock.anyObject()))
             .andReturn(new IDTokenClaimsSet(new Issuer("test"),
                                             new Subject("testsub"),
-                                            Collections.emptyList(),
-                                            null,
-                                            null
+                                            Collections.singletonList(new Audience("testClient")),
+                                            new Date(1000),
+                                            new Date(0)
             ));
     EasyMock.replay(tokenValidator);
 
diff --git a/licenses.yaml b/licenses.yaml
index 475f8273b1e7..bbade7a21582 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -988,7 +988,7 @@ name: com.nimbusds content-type
 license_category: binary
 module: extensions/druid-pac4j
 license_name: Apache License version 2.0
-version: 2.2
+version: 2.3
 libraries:
   - com.nimbusds: content-type
 
@@ -998,7 +998,7 @@ name: com.nimbusds oauth2-oidc-sdk
 license_category: binary
 module: extensions/druid-pac4j
 license_name: Apache License version 2.0
-version: 10.8
+version: 11.38.2
 libraries:
   - com.nimbusds: oauth2-oidc-sdk