diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 7e30564264c41..4fba39f285baa 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -330,7 +330,7 @@ The Apache Software License, Version 2.0
  * Proto Google Common Protos -- com.google.api.grpc-proto-google-common-protos-1.12.0.jar
  * Bitbucket -- org.bitbucket.b_c-jose4j-0.7.2.jar
  * Gson
-    - com.google.code.gson-gson-2.8.6.jar
+    - com.google.code.gson-gson-2.8.9.jar
     - io.gsonfire-gson-fire-1.8.4.jar
  * Sundrio
     - io.sundr-builder-annotations-0.21.0.jar
diff --git a/pom.xml b/pom.xml
index 15dd4df00bd31..fc6f7f35428bd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -133,7 +133,7 @@ flexible messaging model and an intuitive client API.</description>
     <grpc.version>1.33.0</grpc.version>
     <perfmark.version>0.19.0</perfmark.version>
     <protoc-gen-grpc-java.version>${grpc.version}</protoc-gen-grpc-java.version>
-    <gson.version>2.8.6</gson.version>
+    <gson.version>2.8.9</gson.version>
     <sketches.version>0.8.3</sketches.version>
     <hbc-core.version>2.2.0</hbc-core.version>
     <cassandra-driver-core.version>3.6.0</cassandra-driver-core.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index cf8418ddec21d..63cd92e0e0b75 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -441,7 +441,7 @@ The Apache Software License, Version 2.0
     - commons-lang-2.6.jar
     - commons-logging-1.2.jar
   * GSON
-    - gson-2.8.6.jar
+    - gson-2.8.9.jar
   * Jackson
     - jackson-module-parameter-names-2.10.3.jar
     - jackson-module-parameter-names-2.11.1.jar