DTStack chunjun vulnerabilities

Latest DTStack chunjun CVEs

Newest publication first

1. CVE-2026-4735 A stack overflow and DoS vulnerability in DTStack/chunjun

   Published 2026-03-24

   High·CVSS 8.7

   Deserialization of Untrusted Data vulnerability in DTStack chunjun (‎chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program files GsonUtil.Java. This issue affects chunjun: before 1.16.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.