diff --git a/tomee/tomee-webapp/pom.xml b/tomee/tomee-webapp/pom.xml
index cadfee7e..4dca642c 100644
--- a/tomee/tomee-webapp/pom.xml
+++ b/tomee/tomee-webapp/pom.xml
@@ -106,7 +106,7 @@
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.1</version>
+      <version>2.8.9</version>
     </dependency>
     <dependency> <!-- will be moved over endorsed dir so simply adding it alone (= not in javaee-api) -->
       <groupId>org.apache.geronimo.specs</groupId>