diff --git a/CHANGELOG.md b/CHANGELOG.md
index e01026fd1df..30e99e8f0a8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ Currently the versioning policy of this project follows [Semantic Versioning v2.
 
 ## Unreleased - 2022-??-??
 ### Fixed
+- Bumped gson from 2.9.0 to 2.9.1 ([#2136](https://github.com/spotbugs/spotbugs/pull/2136))
 - Fixed InvalidInputException in Eclipse while bug reporting ([#2134](https://github.com/spotbugs/spotbugs/issues/2134))
 
 ## 4.7.1 - 2022-06-26
diff --git a/spotbugs/build.gradle b/spotbugs/build.gradle
index ca587044127..82fefbdd9d3 100644
--- a/spotbugs/build.gradle
+++ b/spotbugs/build.gradle
@@ -96,7 +96,7 @@ dependencies {
   // If they're not repackaged, Ant task will report 'java.lang.ClassNotFoundException: edu.umd.cs.findbugs.annotations.CleanupObligation'
   api project(':spotbugs-annotations')
 
-  api "com.google.code.gson:gson:2.9.0"
+  api "com.google.code.gson:gson:2.9.1"
 
   guiImplementation sourceSets.main.runtimeClasspath
   guiCompileOnly 'com.apple:AppleJavaExtensions:1.4'
diff --git a/spotbugsTestCases/build.gradle b/spotbugsTestCases/build.gradle
index ef7921f02a1..06f9189cef8 100644
--- a/spotbugsTestCases/build.gradle
+++ b/spotbugsTestCases/build.gradle
@@ -14,7 +14,7 @@ dependencies {
   // TODO : Some of these can be extracted to actual dependencies
   implementation fileTree(dir: 'lib', include: '*.jar')
 
-  implementation 'com.google.code.gson:gson:2.9.0'
+  implementation 'com.google.code.gson:gson:2.9.1'
   implementation 'com.google.guava:guava:30.1.1-jre'
   implementation "com.google.inject:guice:${guiceVersion}"
   implementation "com.google.inject.extensions:guice-assistedinject:${guiceVersion}"