Deserialization in Dtstack Chunjun

CVE-2026-4735

Deserialization of Untrusted Data vulnerability in DTStack chunjun (‎chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program files GsonUtil.Java. This issue affects chunjun: before 1.16.1.

Vulnerability class: Insecure Deserialization

EPSS: 0.003 (22.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References