Akka Core
by Akka
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-1000034 | Hig | 0.46 | 8.1 | 0.06 | Jul 17, 2017 | Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem. | ||
| CVE-2025-53393 | Med | 0.32 | 6.0 | 0.00 | Jun 28, 2025 | In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics. | ||
| CVE-2023-31442 | 0.00 | — | 0.01 | May 11, 2023 | In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing… |
- risk 0.46cvss 8.1epss 0.06
Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem.
- risk 0.32cvss 6.0epss 0.00
In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.
- CVE-2023-31442May 11, 2023risk 0.00cvss —epss 0.01
In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing…