← Back

Gson

gson

Vendor: Google • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
GoogleNetapp+1 more
6Active Iq Unified Manager
Debian LinuxFinancial Services Crime And Compliance Management Studio+3 more
Nov 21, 2024
May 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.