GCVE-110-MAGEIA-2022-340

Advisory Published

Vulnetix · Advisory published September 21, 2022

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. (CVE-2022-25647)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	google-gson	2.8.6-1.1.mga8 (unaffected), 0 (affected)	—

Aliases

CVE-2022-25647

References

Updated google-gson packages fix security vulnerability

advisory

Updated google-gson packages fix security vulnerability

issue

Updated google-gson packages fix security vulnerability

issue

Updated google-gson packages fix security vulnerability

advisory

Updated google-gson packages fix security vulnerability

advisory

Browse GCVE Records

74,496 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON