diff --git a/spring-legacy-app/pom.xml b/spring-legacy-app/pom.xml
index 5f0b721..52dc460 100644
--- a/spring-legacy-app/pom.xml
+++ b/spring-legacy-app/pom.xml
@@ -96,7 +96,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.8.6</version>
+            <version>2.8.9</version>
         </dependency>
 
         <!-- Apache HttpClient 4.5.2 - CVE-2020-13956 (Request smuggling) -->