High DLA-3100-1 1 CVE

libgoogle-gson-java - security update

Published Sep 7, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	libgoogle-gson-java	2.8.5-3+deb10u1

Vulnerabilities 1

High 7.7

CVE-2022-25647 EPSS 12%

Deserialization of Untrusted Data

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

openjdk11 openjdk17 trino openjdk15 Debian Ubuntu Alpine Wolfi Maven

May 1, 2022