CVE-2022-25647
Published May 1, 2022The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS att…
- evidence mentions
- 4
- Buzz score
- 27.6