diff --git a/NOTICE-THIRD-PARTY.md b/NOTICE-THIRD-PARTY.md
index 632ee1dfa..923aab731 100644
--- a/NOTICE-THIRD-PARTY.md
+++ b/NOTICE-THIRD-PARTY.md
@@ -109,10 +109,10 @@ GraphHopper Core (0.13.0)
  * Source: https://github.com/graphhopper/graphhopper/graphhopper-core
 
 
-Gson (2.8.6)
+Gson (2.10.1)
 
- * License: Apache 2.0
- * Maven artifact: `com.google.code.gson:gson:2.8.6`
+ * License: Apache-2.0
+ * Maven artifact: `com.google.code.gson:gson:2.10.1`
  * Project: https://github.com/google/gson/gson
  * Source: https://github.com/google/gson/gson/
 
diff --git a/pom.xml b/pom.xml
index bdd9a3cf6..1e9ffb474 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
         <version.commons-text>1.6</version.commons-text><!-- 1.6 is approved in CQ19028 -->
         <version.findbugs-annotations>1.3.9-1</version.findbugs-annotations><!-- 1.3.9-1 is approved in CQ15081 -->
         <version.graphhopper>0.13.0</version.graphhopper><!-- 0.13.0 is approved in CQ22337 (api) and CQ22338 (core) -->
-        <version.gson>2.8.6</version.gson><!-- 2.8.6 is approved in CQ21635 -->
+        <version.gson>2.10.1</version.gson><!-- 2.10.1 is approved in #6159 -->
         <version.guava>32.1.1-jre</version.guava><!-- 28.2-jre is approved in #9229 -->
         <version.hppc>0.8.1</version.hppc><!-- 0.8.1 is approved in CQ22339 -->
         <version.jackson-xml>2.9.9</version.jackson-xml><!-- 2.9.9 is approved in CQ20701 -->