diff --git a/onebusaway-nyc-integration-tests/pom.xml b/onebusaway-nyc-integration-tests/pom.xml
index 71e687cec..3bb72911e 100644
--- a/onebusaway-nyc-integration-tests/pom.xml
+++ b/onebusaway-nyc-integration-tests/pom.xml
@@ -89,7 +89,7 @@
         <dependency>
             <groupId>org.hsqldb</groupId>
             <artifactId>hsqldb</artifactId>
-            <version>2.3.5</version><!-- force newer version -->
+            <version>2.7.1</version><!-- force newer version -->
         </dependency>
         <dependency>
             <groupId>commons-httpclient</groupId>
diff --git a/onebusaway-nyc-report/pom.xml b/onebusaway-nyc-report/pom.xml
index 9c426b646..528b12a8e 100644
--- a/onebusaway-nyc-report/pom.xml
+++ b/onebusaway-nyc-report/pom.xml
@@ -55,7 +55,7 @@
         <dependency>
             <groupId>org.hsqldb</groupId>
             <artifactId>hsqldb</artifactId>
-            <version>2.0.0</version>
+            <version>2.7.1</version>
         </dependency>
 
         <dependency>
diff --git a/pom.xml b/pom.xml
index 330555919..d1fca373f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -19,7 +19,7 @@
         <gitDescribe>99999</gitDescribe>
         <gtfs-api-version>1.2.16</gtfs-api-version><!-- please keep this in sync with app-mods gtfs-api-version -->
         <hessian.version>4.0.38</hessian.version>
-        <hsqldb.version>2.6.0</hsqldb.version>
+        <hsqldb.version>2.7.1</hsqldb.version>
         <jackson.version>2.12.0</jackson.version>
         <jakarta.xml.version>2.3.3</jakarta.xml.version>
         <jaxb-impl.version>2.3.3</jaxb-impl.version>