We're on google gson 2.8.9, but our only use of it, in Hibernate Search, uses 2.13.1 in the 8.0.0 version we use in WFP and 2.11 in the version we use in std WildFly.

An issue that relates to CVE-2025-53864 is fixed in 2.12, so rather than jumping just to 2.11 I'll see about using 2.13.1. Which is the latest version.

https://github.com/google/gson/compare/gson-parent-2.8.9...gson-parent-2.13.1

https://github.com/google/gson/compare/gson-parent-2.11.0...gson-parent-2.13.1