diff --git a/onebusaway-util/pom.xml b/onebusaway-util/pom.xml
index 5aa726bba..9e7855075 100644
--- a/onebusaway-util/pom.xml
+++ b/onebusaway-util/pom.xml
@@ -27,7 +27,7 @@
 		<dependency>
 			<groupId>com.google.code.gson</groupId>
 			<artifactId>gson</artifactId>
-			<version>2.1</version>
+			<version>2.8.9</version>
 		</dependency>
 			<dependency>
 				<groupId>joda-time</groupId>