CVE-2022-25647 in Gson 2.8.5

Deserialization of Untrusted Data in Gson

Severity

High 7.7

Exploitation

12% chance of exploit
in the next 30 days

Fix

Update to 2.8.9

Where

Test dependency

How it matched

Exact version match

Also known as

GHSA-4jrv-ppp4-jm57, SNYK-JAVA-COMGOOGLECODEGSON-1730327

First seen

2026-11-05 01:13:58 UTC

Source

https://osv.dev/vulnerability/GHSA-4jrv-ppp4-jm57