diff --git a/dependencies/spring-security-dependencies.gradle b/dependencies/spring-security-dependencies.gradle
index 0dd1a25470..6651a779c6 100644
--- a/dependencies/spring-security-dependencies.gradle
+++ b/dependencies/spring-security-dependencies.gradle
@@ -18,8 +18,8 @@ dependencies {
 	constraints {
 		api "ch.qos.logback:logback-classic:1.2.6"
 		api "com.google.inject:guice:3.0"
-		api "com.nimbusds:nimbus-jose-jwt:9.11.3"
-		api "com.nimbusds:oauth2-oidc-sdk:9.12"
+		api "com.nimbusds:nimbus-jose-jwt:9.12.1"
+		api "com.nimbusds:oauth2-oidc-sdk:9.15"
 		api "com.squareup.okhttp3:mockwebserver:3.14.9"
 		api "com.squareup.okhttp3:okhttp:3.14.9"
 		api "com.unboundid:unboundid-ldapsdk:4.0.14"
diff --git a/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderTests.java b/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderTests.java
index 4ac91d46f6..da80e3e40d 100644
--- a/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderTests.java
+++ b/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderTests.java
@@ -694,7 +694,7 @@ public class NimbusJwtDecoderTests {
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> jwtDecoder.decode(SIGNED_JWT))
 				.withMessageContaining("An error occurred while attempting to decode the Jwt: "
-						+ "Required JOSE header \"typ\" (type) parameter is missing");
+						+ "Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
diff --git a/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusReactiveJwtDecoderTests.java b/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusReactiveJwtDecoderTests.java
index 89fb7e3113..7503fb823d 100644
--- a/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusReactiveJwtDecoderTests.java
+++ b/oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusReactiveJwtDecoderTests.java
@@ -359,7 +359,7 @@ public class NimbusReactiveJwtDecoderTests {
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -442,7 +442,7 @@ public class NimbusReactiveJwtDecoderTests {
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.rsa256).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -486,7 +486,7 @@ public class NimbusReactiveJwtDecoderTests {
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
 				.havingRootCause()
-				.withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -559,7 +559,7 @@ public class NimbusReactiveJwtDecoderTests {
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}