Malware in gson-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2675 Malicious code in gson-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd315ab6614bdf716d90b22ff2804ff7594f8bfe856133c0d60bebaf9d241e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2024-1388 Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384541935 Crash type: Security exception Crash state: com.google.gson.internal.bind.TypeAdapters$28.write com.google.gson.JsonElement.isJsonPrimitive com.google.gson.JsonElement.getAsJsonPrimitive...

PT-2024-41059 · Google · Gson

Name of the Vulnerable Software and Affected Versions: Gson affected versions not specified Description: A security exception occurs due to a crash in the com.google.gson.internal.bind.TypeAdapters$28.write function, which is related to the com.google.gson.JsonElement.isJsonPrimitive and...

sigstore-java:BundleReaderFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Project: https://github.com/sigstore/sigstore-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4812223141183488 Project: sigstore-java Fuzzing Engine: libFuzzer Fuzz Target: BundleReaderFuzzer Job Type: libfuzzerasansigstore-java Platform Id: linux Crash Type: Security exception Crash...

Security Bulletin: Vulnerability in Google Gson affects watsonx.data

Summary Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By...

OPENSUSE-SU-2024:12040-1 google-gson-2.8.9-3.1 on GA media

These are all security issues fixed in the google-gson-2.8.9-3.1 package on the GA media of openSUSE Tumbleweed...

json-flattener:UnflattenFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Detailed Report: https://oss-fuzz.com/testcase?key=5299875095838720 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Ubuntu: Security Advisory (USN-6692-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6692-1 libgoogle-gson-java vulnerability

It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

USN-6692-1: Gson vulnerability

It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Gson vulnerability (USN-6692-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6692-1 advisory. It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were...

Oracle Business Intelligence Enterprise Edition (OAS 7.0) (January 2024 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

The vulnerability of the com.google.code.gson:gson library, which allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the com.google.code.gson:gson library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute a DoS attack...

json-flattener:UnflattenFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Detailed Report: https://oss-fuzz.com/testcase?key=5205763114795008 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Oracle Application Testing Suite DoS (October 2023 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by a denial of service vulnerability as referenced in the October 2023 CPU advisory: - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for We...

json-flattener:UnflattenFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Detailed Report: https://oss-fuzz.com/testcase?key=4723164405694464 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.

Summary Netcool Operations Insight v1.6.10 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the writeReplace...

Security Bulletin: Multiple vulnerabilities in gson-2.2.4.jar affect IBM Application Performance Management products

Summary There are multiple vulnerabilities in gson-2.2.4.jar used by IBM Application Performance Management. IBM Application Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused b...

Security Bulletin: IBM Cloud Pak for Network Automation 2.6 addresses multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.6 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the...