WS-2021-0419 | Mend Vulnerability Database

Vulnerability DatabaseWS-2021-0419

WS-2021-0419

Published:May 14, 2026

Updated:May 14, 2026

Denial of Service vulnerability was discovered in gson before 2.8.9 via the writeReplace() method.

Affected Packages

nextflow (CONDA):

Affected version(s) >=21.04.0 <23.04.1

Fix Suggestion:

Update to version 23.04.1

pyspark (CONDA):

Affected version(s) >=3.5.3 <=3.5.4

Fix Suggestion:

Update to version no_fix

r-provviz (CONDA):

Affected version(s) >=1.0.6 <=1.0.8

Fix Suggestion:

Update to version no_fix

r-r2pmml (CONDA):

Affected version(s) =0.26.0

Fix Suggestion:

Update to version no_fix

searchgui (CONDA):

Affected version(s) >=4.0.22 <4.0.41

Fix Suggestion:

Update to version 4.0.41

existdb (CONDA):

Affected version(s) >=4.5.0 <=4.7.1

Fix Suggestion:

Update to version no_fix

salesforce-merlion (CONDA):

Affected version(s) >=1.0.0 <1.1.0

Fix Suggestion:

Update to version 1.1.0

malt (CONDA):

Affected version(s) >=0.5.1 <0.41

Fix Suggestion:

Update to version 0.41

gradle (CONDA):

Affected version(s) >=6.4.0 <=7.4.2

Fix Suggestion:

Update to version no_fix

pyspark (CONDA):

Affected version(s) >=3.3.0 <3.3.2

Fix Suggestion:

Update to version 3.3.2

sirius-csifingerid (CONDA):

Affected version(s) >=4.0.1 <5.8.2

Fix Suggestion:

Update to version 5.8.2

igv (CONDA):

Affected version(s) >=2.8.11 <=2.16.2

Fix Suggestion:

Update to version no_fix

gradle (CONDA):

Affected version(s) >=5.3.1 <6.3.0

Fix Suggestion:

Update to version 6.3.0

igv (CONDA):

Affected version(s) >=2.8.4 <2.8.10

Fix Suggestion:

Update to version 2.8.10

genomestrip (CONDA):

Affected version(s) =2.00.1833

Fix Suggestion:

Update to version no_fix

megan (CONDA):

Affected version(s) >=6.21.2 <=6.24.20

Fix Suggestion:

Update to version no_fix

metanovo (CONDA):

Affected version(s) =1.9.4

Fix Suggestion:

Update to version no_fix

mpa-portable (CONDA):

Affected version(s) >=1.9.0 <=2.0.0

Fix Suggestion:

Update to version no_fix

fiji (CONDA):

Affected version(s) >=20151222 <20231211

Fix Suggestion:

Update to version 20231211

cromwell (CONDA):

Affected version(s) >=0.23 <0.32

Fix Suggestion:

Update to version 0.32

pepgenome (CONDA):

Affected version(s) =1.1.beta

Fix Suggestion:

Update to version no_fix

igvtools (CONDA):

Affected version(s) >=2.5.3 <=2.16.2

Fix Suggestion:

Update to version no_fix

malt (CONDA):

Affected version(s) >=0.53 <=0.61

Fix Suggestion:

Update to version no_fix

pepquery (CONDA):

Affected version(s) >=1.2.0 <=2.0.2

Fix Suggestion:

Update to version no_fix

peptide-shaker (CONDA):

Affected version(s) >=1.16.29 <2.2.17

Fix Suggestion:

Update to version 2.2.17

existdb (CONDA):

Affected version(s) =4.3.1 <4.4.0

Fix Suggestion:

Update to version 4.4.0

sklearn2pmml (CONDA):

Affected version(s) >=0.67.0 <0.76.1

Fix Suggestion:

Update to version 0.76.1

watchdog-wms (CONDA):

Affected version(s) >=2.0.0 <2.0.5

Fix Suggestion:

Update to version 2.0.5

pyspark (CONDA):

Affected version(s) =3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

sklearn2pmml (CONDA):

Affected version(s) >=0.64.0 <0.66.0

Fix Suggestion:

Update to version 0.66.0

igv (CONDA):

Affected version(s) >=2.5.2 <2.8.3

Fix Suggestion:

Update to version 2.8.3

watchdog-wms (CONDA):

Affected version(s) >=2.0.6 <2.0.8

Fix Suggestion:

Update to version 2.0.8

peptide-shaker (CONDA):

Affected version(s) >=1.1.3 <1.16.26

Fix Suggestion:

Update to version 1.16.26

pyspark (CONDA):

Affected version(s) >=2.1.0 <3.2.3

Fix Suggestion:

Update to version 3.2.3

beakerx (CONDA):

Affected version(s) >=0.14.0 <=1.4.1

Fix Suggestion:

Update to version no_fix

interproscan (CONDA):

Affected version(s) >=5.52_86.0 <5.59_91.0

Fix Suggestion:

Update to version 5.59_91.0

searchgui (CONDA):

Affected version(s) >=2.1.4 <4.0.12

Fix Suggestion:

Update to version 4.0.12

flyway.commandline.jre (NUGET):

Affected version(s) =7.15.0 <8.2.2

Fix Suggestion:

Update to version 8.2.2

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20201229.161815 <203.0.20200923.135724-eap01

Fix Suggestion:

Update to version 203.0.20200923.135724-eap01

logstash-binary (NUGET):

Affected version(s) >=7.8.0 <=7.8.1

Fix Suggestion:

Update to version no_fix

micro-manager.net (NUGET):

Affected version(s) =2.0.3.3

Fix Suggestion:

Update to version no_fix

flyway.commandline (NUGET):

Affected version(s) >=6.0.6 <8.2.2

Fix Suggestion:

Update to version 8.2.2

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20210317.94906 <203.0.20201127.95230-eap09

Fix Suggestion:

Update to version 203.0.20201127.95230-eap09

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =211.0.20210410.35359 <212.0.20210730.195106

Fix Suggestion:

Update to version 212.0.20210730.195106

dapiconnect-xamarin.android (NUGET):

Affected version(s) =0.1.0 <0.1.1

Fix Suggestion:

Update to version 0.1.1

jetbrains.rider.frontend2 (NUGET):

Affected version(s) >=211.0.20210713.161611 <211.0.20210130.101832-eap01

Fix Suggestion:

Update to version 211.0.20210130.101832-eap01

tikiwiki/diagram (PHP):

Affected version(s) >=v14.1.3 <v14.2.8

Fix Suggestion:

Update to version v14.2.8

lizetheb1920/high-chart (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tikiwiki/diagram (PHP):

Affected version(s) =v15.8.7 <v15.8.8

Fix Suggestion:

Update to version v15.8.8

purepanel/dashboard-module (PHP):

Affected version(s) >=v1.0.0 <v1.1.2

Fix Suggestion:

Update to version v1.1.2

oxil/kinikit-mvc (PHP):

Affected version(s) =0.6 <v0.6

Fix Suggestion:

Update to version v0.6

oxil/kinikit-mvc (PHP):

Affected version(s) =0.2 <v0.2

Fix Suggestion:

Update to version v0.2

ddkits/cli (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/tough-cookie-4.1.3 <4.20

Fix Suggestion:

Update to version 4.20

oxil/kinikit-mvc (PHP):

Affected version(s) =dev-netistrar <dev-refactoring

Fix Suggestion:

Update to version dev-refactoring

tikiwiki/diagram (PHP):

Affected version(s) =v13.6.5 <v13.6.6

Fix Suggestion:

Update to version v13.6.6

tikiwiki/diagram (PHP):

Affected version(s) >=v13.9.9 <v13.10.5

Fix Suggestion:

Update to version v13.10.5

tikiwiki/diagram (PHP):

Affected version(s) >=v14.0.2 <v14.1.2

Fix Suggestion:

Update to version v14.1.2

tikiwiki/diagram (PHP):

Affected version(s) >=v13.9.4 <v13.9.7

Fix Suggestion:

Update to version v13.9.7

oxil/kinikit-mvc (PHP):

Affected version(s) =0.3 <v0.3

Fix Suggestion:

Update to version v0.3

ddkits/cli (PHP):

Affected version(s) =dev-New2 <dev-beta2

Fix Suggestion:

Update to version dev-beta2

oxil/kinibook (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

oxil/kinikit-mvc (PHP):

Affected version(s) =0.1 <v0.1

Fix Suggestion:

Update to version v0.1

myparkfolio/jars-gson (PHP):

Affected version(s) =2.8.5

Fix Suggestion:

Update to version no_fix

oxil/kinikit-mvc (PHP):

Affected version(s) =0.5 <v0.5

Fix Suggestion:

Update to version v0.5

flash20/yii2-adminh-asset (PHP):

Affected version(s) >=dev-master <=0.0.3

Fix Suggestion:

Update to version no_fix

oxil/kinikit-mvc (PHP):

Affected version(s) =0.7 <v0.7

Fix Suggestion:

Update to version v0.7

myparkfolio/jars-gson (PHP):

Affected version(s) =dev-master <2.1.0

Fix Suggestion:

Update to version 2.1.0

xorti/mxgraph-editor (PHP):

Affected version(s) =dev-master <v3.9.8

Fix Suggestion:

Update to version v3.9.8

tikiwiki/diagram (PHP):

Affected version(s) >=v15.7.1 <v15.7.4

Fix Suggestion:

Update to version v15.7.4

sklearn2pmml (PYTHON):

Affected version(s) >=0.64.0 <0.66.0

Fix Suggestion:

Update to version 0.66.0

pyspark (PYTHON):

Affected version(s) >=3.3.0 <3.3.2

Fix Suggestion:

Update to version 3.3.2

pyspark (PYTHON):

Affected version(s) >=3.5.3 <=3.5.4

Fix Suggestion:

Update to version no_fix

pyspark (PYTHON):

Affected version(s) =3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

beakerx (PYTHON):

Affected version(s) >=0.14.0 <=1.4.1

Fix Suggestion:

Update to version no_fix

sklearn2pmml (PYTHON):

Affected version(s) >=0.67.0 <0.76.1

Fix Suggestion:

Update to version 0.76.1

salesforce-merlion (PYTHON):

Affected version(s) >=1.0.0 <1.1.0

Fix Suggestion:

Update to version 1.1.0

Related Resources (1)

https://github.com/google/gson/pull/1991

Do you need more information?

CVSS v4

Base Score:

8.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

HIGH

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

HIGH

Availability

HIGH