1 matches found
MGASA-2022-0340 Updated google-gson packages fix security vulnerability
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks. CVE-2022-25647...
7.7CVSS7.6AI score0.1223EPSS
SaveExploits0References5
20