Skip to content
OpenAdvisories
High · 8.7 CVE-2026-4735 EUVD-2026-14708GHSA-q9jc-xq58-m52x

A stack overflow and DoS vulnerability in DTStack/chunjun

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

Deserialization of Untrusted Data vulnerability in DTStack chunjun (‎chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program files GsonUtil.Java.

This issue affects chunjun: before 1.16.1.

Affected products

VendorProductAffectedFixed
DTStack chunjun — —

References