Com.google.code.gson:gson vulnerabilities
We track 1 vulnerability in Com.google.code.gson:gson products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Com.google.code.gson:gson vulnerabilities
- 7.5 High severity
com.google.code.gson:gson: Deserialization of Untrusted Data
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.