diff --git a/pom.xml b/pom.xml
index 084723a5686..bc5b764cb19 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
     <antlr4.version>4.6</antlr4.version>
     <hazelcast.version>3.7.8</hazelcast.version>
     <guava.version>15.0</guava.version>
-    <gson.version>2.2</gson.version>
+    <gson.version>2.8.9</gson.version>
     <test.build.dir>${project.build.directory}/test-dir</test.build.dir>
     <maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
     <kerby.version>1.0.1</kerby.version>
diff --git a/smart-zeppelin/pom.xml b/smart-zeppelin/pom.xml
index 11bfd1dda96..2c50a0535ee 100644
--- a/smart-zeppelin/pom.xml
+++ b/smart-zeppelin/pom.xml
@@ -67,7 +67,7 @@
     <!-- common library versions -->
     <slf4j.version>1.7.25</slf4j.version>
     <libthrift.version>0.9.2</libthrift.version>
-    <gson.version>2.2</gson.version>
+    <gson.version>2.8.9</gson.version>
     <guava.version>15.0</guava.version>
     <jetty.version>9.2.15.v20160210</jetty.version>
     <httpcomponents.core.version>4.4.1</httpcomponents.core.version>