Search vulnerabilities

Results 1

Export CSV
CVE-2022-25647

Deserialization of Untrusted Data

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

CVSS 3.1 · 7.7 High EPSS 12.2% KEV · Not listed
Vendors
Debian Google Netapp and 2 more