PT-2026-27313 · Dtstack · Chunjun

Titan Team · Publicado 2026-03-24 · Atualizado 2026-04-30 · CVE-2026-4735

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:P/S:N/AU:Y/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions chunjun versions prior to 1.16.1

Description An unreliable data deserialization issue exists in DTStack chunjun, specifically within the chunjun-core/src/main/java/com/dtstack/chunjun/util modules. The problem is linked to the GsonUtil.Java program files.

Recommendations Update chunjun to version 1.16.1 or later.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2026-4735

Produtos afetados

Chunjun

Referências · 4

• https://github.com/DTStack/chunjun/pull/1939 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-4735 · Nota de Segurança
• https://t.me/cveNotify/161577 · Publicação no Telegram
• https://twitter.com/CVEarity/status/2036847967295201292 · Publicação no Twitter