CLSA-2026-1791931295 TuxCare security update for com.google.code.gson:gson (2 CVEs)

TuxCare rebuilt com.google.code.gson:gson to address 2 CVEs. Fixed in 2.2.2-tuxcare.1...

PT-2026-83037

TuxCare rebuilt com.google.code.gson:gson to address 1 CVE. Fixed in 2.2.4-tuxcare.1...

PT-2026-73586

TuxCare rebuilt com.google.code.gson:gson to address 1 CVE. Fixed in 2.9.1-tuxcare.1...

PT-2026-73865

TuxCare rebuilt com.google.code.gson:gson to address 1 CVE. Fixed in 2.4-tuxcare.1...

DoS (Denial of Service) com.google.code.gson:gson Dependency in Crucible Data Center and Server

This High severity com.google.code.gson:gson Dependency vulnerability was introduced in version 4.8.0 of Crucible Data Center and Server. This com.google.code.gson:gson Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

com.baidu:bigpipe-driver (>=1.0.2, <=1.0.6), com.inmorn:morn-extspring (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (1.5)

com.google.code.gson:gson MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.code.gson:gson and may be impacted: - com.baidu:bigpipe-driver =1.0.2, =1.0.1, =3.12.0, =3.12.0, =3.13.2 Source cves: CVE-2022-25647 Source advisory:...

com.bazaarvoice:gumshoe (>=1.2, <=1.4), com.cedarsoft.serialization.test:performance (>=2.1.0, <=3.0.0) +77 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (1.4)

com.google.code.gson:gson MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.code.gson:gson and may be impacted: - com.bazaarvoice:gumshoe =1.2, =2.1.0, =1.1, =1.1, =1.1, =1.1, =1.1.2 and more Source cves: CVE-2022-25647 Sourc...

com.etesync:journalmanager (>=1.0.1, <=1.1.1), com.github.github:downloads-maven-plugin (>=0.1, <=0.4) +244 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (1.7.2)

com.google.code.gson:gson MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.code.gson:gson and may be impacted: - com.etesync:journalmanager =1.0.1, =0.1, =0.1, =0.1, =0.9, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3,...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12) +45952 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (>=2.0, <=2.8.8)

com.google.code.gson:gson MAVEN version =2.0, =1.0.1, =1.4.6, =1.4.6, =1.1.0, ='1.0.3', =0.9.6, =1.0.0, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.2.8 and more Source cves: CVE-2022-25647 Source advisory: OSV:GHSA-4JRV-PPP4-JM57...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12) +45952 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (>=2.0, <=2.8.8)

com.google.code.gson:gson MAVEN version =2.0, =1.0.1, =1.4.6, =1.4.6, =1.1.0, ='1.0.3', =0.9.6, =1.0.0, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.2.8 and more Source cves: CVE-2022-25647 Source advisory: GHSA-4JRV-PPP4-JM57...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12) +46320 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (>=1.4, <=2.8.8)

com.google.code.gson:gson MAVEN version =1.4, =1.0.1, =1.4.6, =1.4.6, =1.1.0, ='1.0.3', =0.9.6, =1.0.0, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.2.8 and more Source cves: CVE-2022-25647 Source advisory: MEND:CVE-2022-25647...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12) +44356 more potentially affected by CVE-2022-25647 via com.google.code.gson:gson (>=2.2.3, <=2.8.8)

com.google.code.gson:gson MAVEN version =2.2.3, =1.0.1, =1.4.6, =1.4.6, =1.1.0, ='1.0.3', =0.9.6, =1.0.0, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.2.8 and more Source cves: CVE-2022-25647 Source advisory: SNYK:JAVA-COMGOOGLECODEGSON-1730327...