diff --git a/commons/build.gradle b/commons/build.gradle
index 7bc61d0b6..d2822a484 100644
--- a/commons/build.gradle
+++ b/commons/build.gradle
@@ -33,7 +33,7 @@ dependencies {
     implementation 'org.springframework.data:spring-data-redis'
     testImplementation 'org.apache.commons:commons-lang3:3.11'
     implementation 'io.vertx:vertx-pg-client:3.9.2'
-    implementation 'com.nimbusds:nimbus-jose-jwt:8.20'
+    implementation 'com.nimbusds:nimbus-jose-jwt:9.9.3'
 }
 
 jacocoTestReport {
diff --git a/consent/build.gradle b/consent/build.gradle
index 67e8897bc..b1b253db1 100644
--- a/consent/build.gradle
+++ b/consent/build.gradle
@@ -46,7 +46,7 @@ dependencies {
     implementation 'javax.xml.bind:jaxb-api:2.3.1'
     implementation 'io.vertx:vertx-pg-client:3.9.2'
     implementation 'org.springframework.boot:spring-boot-starter-security'
-    implementation 'com.nimbusds:nimbus-jose-jwt:8.20'
+    implementation 'com.nimbusds:nimbus-jose-jwt:9.9.3'
     implementation 'io.vavr:vavr:0.10.3'
     implementation 'org.passay:passay:1.6.0'
     implementation 'io.lettuce:lettuce-core:5.3.3.RELEASE'
diff --git a/dataflow/build.gradle b/dataflow/build.gradle
index f392b5869..d7fcd43b3 100644
--- a/dataflow/build.gradle
+++ b/dataflow/build.gradle
@@ -44,7 +44,7 @@ dependencies {
     testImplementation 'org.springframework.security:spring-security-test'
     implementation 'io.vertx:vertx-pg-client:3.9.2'
     testImplementation 'org.jeasy:easy-random-core:4.2.0'
-    implementation 'com.nimbusds:nimbus-jose-jwt:8.20'
+    implementation 'com.nimbusds:nimbus-jose-jwt:9.9.3'
     implementation 'io.lettuce:lettuce-core:5.3.3.RELEASE'
 
     implementation project(':commons')
diff --git a/user/build.gradle b/user/build.gradle
index 753a7e801..c7cb42e0e 100644
--- a/user/build.gradle
+++ b/user/build.gradle
@@ -36,7 +36,7 @@ dependencies {
     implementation 'com.google.guava:guava:29.0-jre'
     implementation 'io.jsonwebtoken:jjwt:0.9.1'
     implementation 'javax.xml.bind:jaxb-api:2.3.1'
-    implementation 'com.nimbusds:nimbus-jose-jwt:8.20'
+    implementation 'com.nimbusds:nimbus-jose-jwt:9.9.3'
     implementation 'io.vavr:vavr:0.10.3'
     implementation 'org.passay:passay:1.6.0'
     compileOnly 'org.projectlombok:lombok'