The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
Affected Platforms
Oracle Retail Order BrokerDebian Debian LinuxOracle GraalvmNetapp Active Iq Unified ManagerOracle Financial Services Crime And Compliance Management StudioGoogle Gson