| Package | Affected versions | Patched versions |
|---|---|---|
| com.google.code.gson:gson | < 2.8.9 | 2.8.9 |
| gson | ≥ 2.2.3, < 2.8.9 | 2.8.9 |
| financial services crime and compliance management studio | = 8.0.8.2.0= 8.0.8.3.0 | |
| graalvm | = 20.3.6= 21.3.2= 22.1.0 | |
| retail order broker | = 18.0= 19.1 |
The package com.google.code.gson:gson before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to denial of service attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free