diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8a5af673cf54f..2f6817c5297f3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -24,7 +24,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Changed
 
 ### Dependencies
-- Bump `com.google.code.gson:gson` from 2.12.1 to 2.13.0 ([#17923](https://github.com/opensearch-project/OpenSearch/pull/17923))
+- Bump `com.google.code.gson:gson` from 2.12.1 to 2.13.1 ([#17923](https://github.com/opensearch-project/OpenSearch/pull/17923), [#18266](https://github.com/opensearch-project/OpenSearch/pull/18266))
 - Bump `com.github.spotbugs:spotbugs-annotations` from 4.9.0 to 4.9.3 ([#17922](https://github.com/opensearch-project/OpenSearch/pull/17922))
 - Bump `com.microsoft.azure:msal4j` from 1.18.0 to 1.20.0 ([#17925](https://github.com/opensearch-project/OpenSearch/pull/17925))
 - Update Apache HttpClient5 and HttpCore5 (CVE-2025-27820) ([#18152](https://github.com/opensearch-project/OpenSearch/pull/18152))
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
index 4bc79f85db2a4..e1d132cfcd06c 100644
--- a/plugins/repository-hdfs/build.gradle
+++ b/plugins/repository-hdfs/build.gradle
@@ -67,7 +67,7 @@ dependencies {
   api 'org.apache.htrace:htrace-core4:4.2.0-incubating'
   api "org.apache.logging.log4j:log4j-core:${versions.log4j}"
   api 'org.apache.avro:avro:1.12.0'
-  api 'com.google.code.gson:gson:2.13.0'
+  api 'com.google.code.gson:gson:2.13.1'
   runtimeOnly "com.google.guava:guava:${versions.guava}"
   api "commons-logging:commons-logging:${versions.commonslogging}"
   api 'commons-cli:commons-cli:1.9.0'
diff --git a/plugins/repository-hdfs/licenses/gson-2.13.0.jar.sha1 b/plugins/repository-hdfs/licenses/gson-2.13.0.jar.sha1
deleted file mode 100644
index 7cf8ab0bbe08e..0000000000000
--- a/plugins/repository-hdfs/licenses/gson-2.13.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-111ac98ad3d2d099d81d53b0549748144a8d2659
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/gson-2.13.1.jar.sha1 b/plugins/repository-hdfs/licenses/gson-2.13.1.jar.sha1
new file mode 100644
index 0000000000000..9cdfa1421b377
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/gson-2.13.1.jar.sha1
@@ -0,0 +1 @@
+853ce06c11316b33a8eae5e9095da096a9528b8f
\ No newline at end of file