Lightbend vulnerabilities

Products

• Play Framework 11
• Akka Http 2
• Spray-json 2

Newest

• akka management, apache pekko management, lightbend akka management +2 more Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective CVE-2025-46548 Fix available 6.5 MediumJune 3, 2025
• lightbend akka http When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll... CVE-2023-33251 4.7 MediumMay 21, 2023
• lightbend akka discovery, akka actor +1 more In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and... CVE-2023-31442 7.5 HighMay 11, 2023
• lightbend alpakka kafka Lightbend Alpakka Kafka logs credentials on debug level CVE-2023-29471 Fix available 5.5 MediumApril 27, 2023
• lightbend play framework, playframework +1 more Dev error stack trace leaking into prod in Play Framework CVE-2022-31023 Fix available 5.9 MediumJune 2, 2022
• lightbend play framework, playframework +1 more Denial of service binding form from JSON in Play Framework CVE-2022-31018 Fix available 7.5 HighJune 2, 2022
• lightbend akka-http HTTP Request Smuggling CVE-2021-23339 Fix available 5.0 MediumFebruary 17, 2021
• lightbend play framework Data Amplification in Play Framework CVE-2020-28923 Fix available 2.7 LowDecember 3, 2020
• lightbend play framework Data Amplification in Play Framework CVE-2020-26882 Fix available 7.5 HighNovember 6, 2020
• lightbend play framework Out-of-bounds Write in Play Framework CVE-2020-27196 Fix available 7.5 HighNovember 6, 2020
• lightbend play framework Uncontrolled Recursion in Play Framework CVE-2020-26883 Fix available 7.5 HighNovember 6, 2020
• lightbend play framework CSRF in Play Framework CVE-2020-12480 Fix available 6.5 MediumAugust 17, 2020
• lightbend play framework Play Framework Inadequate Encryption Strength vulnerability CVE-2019-17598 Fix available 7.5 HighNovember 5, 2019
• lightbend spray-json Uncontrolled Resource Consumption in spray-json CVE-2018-18854 Fix available 7.5 HighOctober 31, 2018
• lightbend spray-json Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields CVE-2018-18853 Fix available 7.5 HighOctober 31, 2018
• lightbend akka http High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12 CVE-2018-16131 Fix available 7.5 HighAugust 30, 2018
• lightbend akka Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor CVE-2018-16115 Fix available 9.1 CriticalAugust 29, 2018
• lightbend play framework Play Framework's Assets controller vulnerable to directory traversal CVE-2018-13864 Public exploitFix available 7.5 HighJuly 17, 2018
• lightbend play framework XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2... CVE-2014-3630 9.8 CriticalDecember 29, 2017
• lightbend play framework, netty +1 more Information Exposure in Netty CVE-2015-2156 Fix available 7.5 HighOctober 18, 2017