https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:41:57.229580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-09014 bdu:2023-09014 2026-10-03T12:41:57.679155+00:00 bdu:2023-09014 https://cve.radiocsirt.org/vuln/certfr-2022-avi-656 certfr-2022-avi-656 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé… 2026-10-03T12:41:57.679203+00:00 certfr-2022-avi-656 https://cve.radiocsirt.org/vuln/euvd-2026-321983 EUVD-2026-321983 2026-10-03T12:41:57.679225+00:00 EUVD-2026-321983 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25647 fkie_cve-2022-25647 2026-10-03T12:41:57.679238+00:00

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

 https://cve.radiocsirt.org/vuln/ghsa-4jrv-ppp4-jm57 GHSA-4jrv-ppp4-jm57 — Deserialization of Untrusted Data in Gson 2026-10-03T12:41:57.679282+00:00

Affected: Maven: com.google.code.gson:gson

The package `com.google.code.gson:gson` before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the `writeReplace()` method in internal classes, which may lead to denial of service attacks.

 https://cve.radiocsirt.org/vuln/gsd-2022-25647 gsd-2022-25647 2026-10-03T12:41:57.679306+00:00 gsd-2022-25647 https://cve.radiocsirt.org/vuln/oesa-2022-1663 OESA-2022-1663 — google-gson security update 2026-10-03T12:41:57.679317+00:00

Affected: openEuler:20.03-LTS-SP1: google-gson, openEuler:20.03-LTS-SP3: google-gson, openEuler:22.03-LTS: google-gson

Gson is a Java library that can be used to convert a Java object into its JSON representation. It can also be used to convert a JSON string into an equivalent Java object. Gson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of. There are a few open-source projects that can convert Java objects to JSON. However, most of them require that you place Java annotations in your classes; something that you can not do if you do not have access to the source-code. Most also do not fully support the use of Java Generics. Gson considers both of these as very important design goals.

Security Fix(es):

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.(CVE-2022-25647)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12040-1 openSUSE-SU-2024:12040-1 — google-gson-2.8.9-3.1 on GA media 2026-10-03T12:41:57.679347+00:00

google-gson-2.8.9-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:4985 RHSA-2022:4985 — Red Hat Security Advisory: Cryostat 2.1.1: new Cryostat on RHEL 8 container images 2026-10-03T12:41:57.679365+00:00

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson golang-gopkg-yaml: crash when attempting to deserialize invalid input

 https://cve.radiocsirt.org/vuln/suse-su-2022:3706-1 SUSE-SU-2022:3706-1 — Security update for google-gson 2026-10-03T12:41:57.679383+00:00

Security update for google-gson

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25647 UBUNTU-CVE-2022-25647 2026-10-03T12:41:57.679398+00:00

Affected: Ubuntu:Pro:16.04:LTS: libgoogle-gson-java, Ubuntu:Pro:18.04:LTS: libgoogle-gson-java, Ubuntu:20.04:LTS: libgoogle-gson-java, Ubuntu:22.04:LTS: libgoogle-gson-java

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0759 WID-SEC-W-2022-0759 — Oracle Java SE: Mehrere Schwachstellen 2026-10-03T12:41:57.679421+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.