Threats tagged 'ghsa-22c9-7ph7-qxcx'

A deserialization of untrusted data vulnerability exists in the SubWorkflow task of Google Cloud Application Integration versions prior to 2026-09-11. This flaw allows an authenticated attacker to execute arbitrary code by submitting a maliciously crafted serialized object. The vulnerability was patched on September 11, 2026, and no customer action is required.