{"id":"OSV-2024-1388","summary":"Security exception in com.google.gson.internal.bind.TypeAdapters$28.write","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384541935\n\n```\nCrash type: Security exception\nCrash state:\ncom.google.gson.internal.bind.TypeAdapters$28.write\ncom.google.gson.JsonElement.isJsonPrimitive\ncom.google.gson.JsonElement.getAsJsonPrimitive\n```\n","modified":"2024-12-18T00:02:54.358393Z","published":"2024-12-18T00:02:54.357847Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384541935"}],"affected":[{"package":{"name":"sigstore-java","ecosystem":"OSS-Fuzz","purl":"pkg:generic/sigstore-java"},"ranges":[{"type":"GIT","repo":"https://github.com/sigstore/sigstore-java","events":[{"introduced":"e3b4402a08d9e93601296165ed2b48ea1a4543a9"},{"fixed":"ea34dcaaad4224158601acb461e0db7b67f2b541"}]}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.9.0","v1.0.0","v1.1.0","v1.2.0"],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sigstore-java/OSV-2024-1388.yaml","fixed_range":"0edeaccd2c471edbc81337cd71121aaeb3be355a:ea34dcaaad4224158601acb461e0db7b67f2b541","introduced_range":"a180ace90f7dce3bba11e47221788a3f33fee29c:ae185caedeb69ef97b15eaaee8ac1e40e27293c6"}}],"schema_version":"1.7.3"}