Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000034.json"