diff --git a/java/ql/lib/semmle/code/java/security/SensitiveApi.qll b/java/ql/lib/semmle/code/java/security/SensitiveApi.qll
index a1c93d3a0d9..1baff16a100 100644
--- a/java/ql/lib/semmle/code/java/security/SensitiveApi.qll
+++ b/java/ql/lib/semmle/code/java/security/SensitiveApi.qll
@@ -491,7 +491,10 @@ private predicate otherApiCallableCredentialParam(string s) {
       "com.microsoft.sqlserver.jdbc.SQLServerDataSource;getConnection(String, String);0",
       "com.microsoft.sqlserver.jdbc.SQLServerDataSource;getConnection(String, String);1",
       "com.auth0.jwt.algorithms.Algorithm;HMAC256(String);0",
+      "com.auth0.jwt.algorithms.Algorithm;HMAC256(byte[]);0",
       "com.auth0.jwt.algorithms.Algorithm;HMAC384(String);0",
-      "com.auth0.jwt.algorithms.Algorithm;HMAC512(String);0"
+      "com.auth0.jwt.algorithms.Algorithm;HMAC384(byte[]);0",
+      "com.auth0.jwt.algorithms.Algorithm;HMAC512(String);0",
+      "com.auth0.jwt.algorithms.Algorithm;HMAC512(byte[]);0"
     ]
 }