diff --git a/juneau-examples/juneau-examples-mcp/pom.xml b/juneau-examples/juneau-examples-mcp/pom.xml
index 525e9bba08..2c9140333d 100644
--- a/juneau-examples/juneau-examples-mcp/pom.xml
+++ b/juneau-examples/juneau-examples-mcp/pom.xml
@@ -38,7 +38,7 @@
 			both declare their Nimbus dependency 'provided' (non-transitive), so a consumer that actually runs
 			JWT validation or the OAuth client flows (as the secured example does) must re-declare them itself. -->
 		<nimbus-jose-jwt.version>10.9.1</nimbus-jose-jwt.version>
-		<nimbus-oauth2-oidc-sdk.version>11.37.2</nimbus-oauth2-oidc-sdk.version>
+		<nimbus-oauth2-oidc-sdk.version>11.38.2</nimbus-oauth2-oidc-sdk.version>
 	</properties>
 
 	<dependencies>
diff --git a/juneau-rest/juneau-rest-client-mcp-auth/pom.xml b/juneau-rest/juneau-rest-client-mcp-auth/pom.xml
index 9e686aba24..d01d9b682e 100644
--- a/juneau-rest/juneau-rest-client-mcp-auth/pom.xml
+++ b/juneau-rest/juneau-rest-client-mcp-auth/pom.xml
@@ -35,7 +35,7 @@
 		<!--
 			Nimbus OAuth 2.0 SDK pin.  Mirrors the juneau-rest-server-auth-oauth pin (11.37.2, May 2026).
 		-->
-		<nimbus-oauth2-oidc-sdk.version>11.37.2</nimbus-oauth2-oidc-sdk.version>
+		<nimbus-oauth2-oidc-sdk.version>11.38.2</nimbus-oauth2-oidc-sdk.version>
 	</properties>
 
 	<dependencies>