Package · Maven

com.google.code.gson:gson

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.7

CVE-2022-25647 EPSS 12%

Deserialization of Untrusted Data

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

openjdk11 openjdk17 openjdk15 openjdk13 Debian Ubuntu Alpine Maven

May 1, 2022