specify / report-runner-service

Jasper Report service for Specify 7
2 stars 2 forks source link

Upgrade Gson #11

Open CarolineDenis opened 7 months ago

CarolineDenis commented 7 months ago

The package com.google.code.gson:gson before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to denial of service attacks.