diff --git a/extensions-core/druid-pac4j/pom.xml b/extensions-core/druid-pac4j/pom.xml
index 12999503917..2e7fcff66e4 100644
--- a/extensions-core/druid-pac4j/pom.xml
+++ b/extensions-core/druid-pac4j/pom.xml
@@ -37,6 +37,7 @@
     <pac4j.version>3.8.3</pac4j.version>
 
     <!-- Following must be updated along with any updates to pac4j version -->
+    <nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
     <nimbus.jose.jwt.version>7.9</nimbus.jose.jwt.version>
     <oauth2.oidc.sdk.version>6.5</oauth2.oidc.sdk.version>
   </properties>
@@ -65,6 +66,11 @@
       <version>${pac4j.version}</version>
     </dependency>
 
+    <dependency>
+      <groupId>com.nimbusds</groupId>
+      <artifactId>lang-tag</artifactId>
+      <version>${nimbus.lang.tag.version}</version>
+    </dependency>
     <dependency>
       <groupId>com.nimbusds</groupId>
       <artifactId>nimbus-jose-jwt</artifactId>
@@ -140,4 +146,19 @@
     </dependency>
   </dependencies>
 
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-dependency-plugin</artifactId>
+        <configuration>
+          <ignoredUnusedDeclaredDependencies>
+            <!-- Transitive dependency explicitly added to lock a specific version -->
+            <ignoredUnusedDeclaredDependency>com.nimbusds:lang-tag</ignoredUnusedDeclaredDependency>
+          </ignoredUnusedDeclaredDependencies>
+        </configuration>
+      </plugin>
+    </plugins>
+  </build>
+
 </project>
diff --git a/licenses.yaml b/licenses.yaml
index 9778fc2fecf..203cba91ec6 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -803,7 +803,7 @@ name: com.nimbusds lang-tag
 license_category: binary
 module: extensions/druid-pac4j
 license_name: Apache License version 2.0
-version: 1.6
+version: 1.7
 libraries:
   - com.nimbusds: lang-tag