diff --git a/core/pom.xml b/core/pom.xml
index 97d31268b3..a6e35e9904 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -204,7 +204,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.8.5</version>
+            <version>2.8.9</version>
         </dependency>
         <dependency>
             <groupId>com.google.api-client</groupId>
diff --git a/job-controller/pom.xml b/job-controller/pom.xml
index b2fab14d84..304220cd36 100644
--- a/job-controller/pom.xml
+++ b/job-controller/pom.xml
@@ -141,7 +141,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.8.5</version>
+            <version>2.8.9</version>
         </dependency>
         <dependency>
             <groupId>com.google.api-client</groupId>
diff --git a/pom.xml b/pom.xml
index b8a9fe9b7b..449712f545 100644
--- a/pom.xml
+++ b/pom.xml
@@ -73,7 +73,7 @@
         <spring.security.oauth2.version>2.5.0.RELEASE</spring.security.oauth2.version>
         <lombok.version>1.18.12</lombok.version>
         <gson.fire.version>1.8.4</gson.fire.version>
-        <gson.version>2.8.6</gson.version>
+        <gson.version>2.8.9</gson.version>
         <swagger.core.version>1.5.24</swagger.core.version>
         <okhttp.version>3.14.7</okhttp.version>
         <commons.lang3.version>3.10</commons.lang3.version>