diff --git a/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml b/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml
new file mode 100644
index 00000000000..fd1a42944ec
--- /dev/null
+++ b/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml
@@ -0,0 +1,7 @@
+title: Update com.nimbusds:nimbus-jose-jwt to v10.9
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#3857
+  url: https://github.com/apache/solr/pull/3857
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 7018c17a31e..0cbe6502356 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -171,7 +171,7 @@ navsecurity = "0.5.10"
 netty = "4.2.12.Final"
 # @keep for version alignment
 netty-tcnative = "2.0.75.Final"
-nimbusds-josejwt = "10.5"
+nimbusds-josejwt = "10.9"
 nlopez-compose = "0.5.7"
 nodegradle-node = "7.1.0"
 # @keep Node JS version used in node.gradle (LTS)
diff --git a/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 b/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1
deleted file mode 100644
index d773a439be6..00000000000
--- a/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-8ef880fa881a4eb9676dd6c419126aa7753d49f2
diff --git a/solr/licenses/nimbus-jose-jwt-10.9.jar.sha1 b/solr/licenses/nimbus-jose-jwt-10.9.jar.sha1
new file mode 100644
index 00000000000..0506ac6094d
--- /dev/null
+++ b/solr/licenses/nimbus-jose-jwt-10.9.jar.sha1
@@ -0,0 +1 @@
+59fa8df26e59665566d9795036e005d149d1fcf3
diff --git a/solr/modules/jwt-auth/gradle.lockfile b/solr/modules/jwt-auth/gradle.lockfile
index de3055b0b4b..868c97a3ee1 100644
--- a/solr/modules/jwt-auth/gradle.lockfile
+++ b/solr/modules/jwt-auth/gradle.lockfile
@@ -34,7 +34,7 @@ com.jayway.jsonpath:json-path:2.9.0=jarValidation,runtimeClasspath,runtimeLibs,s
 com.lmax:disruptor:4.0.0=solrPlatformLibs
 com.nimbusds:content-type:2.2=jarValidation,testCompileClasspath,testRuntimeClasspath
 com.nimbusds:lang-tag:1.7=jarValidation,testCompileClasspath,testRuntimeClasspath
-com.nimbusds:nimbus-jose-jwt:10.5=jarValidation,testCompileClasspath,testRuntimeClasspath
+com.nimbusds:nimbus-jose-jwt:10.9=jarValidation,testCompileClasspath,testRuntimeClasspath
 com.nimbusds:oauth2-oidc-sdk:10.10.1=jarValidation,testCompileClasspath,testRuntimeClasspath
 com.squareup.okhttp3:mockwebserver:4.12.0=jarValidation,testCompileClasspath,testRuntimeClasspath
 com.squareup.okhttp3:okhttp:4.12.0=jarValidation,testCompileClasspath,testRuntimeClasspath