Google Gson vulnerabilities

1 vulnerability

Known vulnerabilities in Google Gson, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2022-25647debian · debian_linux +117 moreDeserialization of Untrusted DataThe package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.CVSS7.7HighEPSS12.23%