CVE-2026-4735: Dtstack Chunjun

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in DTStack chunjun (‎chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program files GsonUtil.Java. This issue affects chunjun: before 1.16.1.

Affected products

• Dtstack Chunjun

Published 2026-03-24. Last modified 2026-06-17.