Gson vulnerabilities

1 known vulnerability in Gson from Google. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  com.google.code.gson:gson: Deserialization of Untrusted Data

  CVE-2022-25647May 1, 2022Com.google.code.gson:gsonEPSS 12.2%

  The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.