diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2c8815668650c..8a4592d50a319 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -76,6 +76,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.squareup.okio:okio` from 3.9.1 to 3.10.2 ([#17060](https://github.com/opensearch-project/OpenSearch/pull/17060))
 - Bump `org.jruby.jcodings:jcodings` from 1.0.58 to 1.0.61 ([#17061](https://github.com/opensearch-project/OpenSearch/pull/17061))
 - Bump `dnsjava:dnsjava` from 3.6.2 to 3.6.3 ([#17231](https://github.com/opensearch-project/OpenSearch/pull/17231))
+- Bump `com.google.code.gson:gson` from 2.11.0 to 2.12.1 ([#17229](https://github.com/opensearch-project/OpenSearch/pull/17229))
 
 ### Changed
 - Indexed IP field supports `terms_query` with more than 1025 IP masks [#16391](https://github.com/opensearch-project/OpenSearch/pull/16391)
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
index c2685a525c8ba..cf76c88c5482e 100644
--- a/plugins/repository-hdfs/build.gradle
+++ b/plugins/repository-hdfs/build.gradle
@@ -67,7 +67,7 @@ dependencies {
   api 'org.apache.htrace:htrace-core4:4.2.0-incubating'
   api "org.apache.logging.log4j:log4j-core:${versions.log4j}"
   api 'org.apache.avro:avro:1.12.0'
-  api 'com.google.code.gson:gson:2.11.0'
+  api 'com.google.code.gson:gson:2.12.1'
   runtimeOnly "com.google.guava:guava:${versions.guava}"
   api "commons-logging:commons-logging:${versions.commonslogging}"
   api 'commons-cli:commons-cli:1.9.0'
diff --git a/plugins/repository-hdfs/licenses/gson-2.11.0.jar.sha1 b/plugins/repository-hdfs/licenses/gson-2.11.0.jar.sha1
deleted file mode 100644
index 0414a49526895..0000000000000
--- a/plugins/repository-hdfs/licenses/gson-2.11.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-527175ca6d81050b53bdd4c457a6d6e017626b0e
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/gson-2.12.1.jar.sha1 b/plugins/repository-hdfs/licenses/gson-2.12.1.jar.sha1
new file mode 100644
index 0000000000000..7d57e885daa08
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/gson-2.12.1.jar.sha1
@@ -0,0 +1 @@
+4e773a317740b83b43cfc3d652962856041697cb
\ No newline at end of file