com.google.code.gson:gson

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-25647unspecified – < 2.8.9Deserialization of Untrusted DataHIGH 7.712 %