Skip to content

Commit 56b6cf6

Browse files
mikhsolJochen Parmentier
authored andcommitted
Update libs.versions.toml (google#8387)
Fix CVE-2022-25647 The package com.google.code.gson:gson before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to denial of service attacks. Bump up version of the gson package. GHSA-4jrv-ppp4-jm57
1 parent ed3f7f5 commit 56b6cf6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

kotlin/gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ plugin-kotlin = "1.6.10"
66
plugin-gver = "0.42.0"
77
kotlinx-benchmark = "0.4.8"
88
junit = "4.12"
9-
gson = "2.8.5"
9+
gson = "2.8.9"
1010
moshi-kotlin = "1.11.0"
1111

1212
[libraries]

0 commit comments

Comments
 (0)