diff --git a/licenses.yaml b/licenses.yaml
index 752e82081643..b5ecb9d5ea5a 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -788,7 +788,7 @@ name: pac4j-core java security library
 license_category: binary
 module: extensions/druid-pac4j
 license_name: Apache License version 2.0
-version: 4.5.7
+version: 5.7.3
 libraries:
   - org.pac4j: pac4j-core
 
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 41d71fbb24a4..f3171dd0fa0b 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -341,16 +341,6 @@
     <cve>CVE-2022-25647</cve>
   </suppress>
 
-  <suppress>
-    <!-- 4.5.5 is a fixed version as per https://nvd.nist.gov/vuln/detail/CVE-2021-44878. -->
-    <!-- However, vulnerability scan still shows this CVE. Pac4j release notes mention 5.3.1 as "fully fixed" version. -->
-    <!-- Remove suppression once upgraded to 5.3.1. -->
-    <notes><![CDATA[
-   file name: pac4j-core-4.5.7.jar
-   ]]></notes>
-    <cve>CVE-2021-44878</cve>
-  </suppress>
-
   <suppress>
     <!-- package-lock.json?d3-color -->
     <notes><![CDATA[
diff --git a/pom.xml b/pom.xml
index f4dd5f0d4512..c8d35c5c78e4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -72,7 +72,7 @@
     <properties>
         <maven.compiler.source>1.8</maven.compiler.source>
         <maven.compiler.target>1.8</maven.compiler.target>
-        <java.version>8</java.version>
+        <java.version>11</java.version>
         <project.build.resourceEncoding>UTF-8</project.build.resourceEncoding>
         <aether.version>0.9.0.M2</aether.version>
         <apache.curator.version>5.3.0</apache.curator.version>