Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: Trivial
Fix Version/s: 26.0.0.Beta1, 26.0.0.Final
Affects Version/s: None
Component/s: None
Labels:
None

Description

GSON has silently improved deserialisation of certain classes and many vulnerability scanners are starting to flag GSON < 2.8.9 as vulnerable to deserialisation attacks

https://github.com/google/gson/pull/1991/files

Attachments

Activity

People

Assignee:: Brian Stansberry

Reporter:: Andre F de Miranda (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 2021/11/23 3:31 AM

Updated:: 2023/01/03 5:13 AM

Resolved:: 2021/11/30 6:02 PM