GHSA-358m-fq53-hp87

Source

https://github.com/advisories/GHSA-358m-fq53-hp87

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-358m-fq53-hp87/GHSA-358m-fq53-hp87.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-358m-fq53-hp87

Aliases

CVE-2025-53393

Published

2025-06-29T00:30:19Z

Modified

2025-06-30T21:44:39Z

Severity

6.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L CVSS Calculator

Summary

akka-cluster-metrics uses Java serialization for cluster metrics

Details

In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.

Database specific

{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-06-30T21:21:59Z",
    "nvd_published_at":  "2025-06-28T23:15:21Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / com.typesafe.akka:akka-cluster-metrics_3

Package

Name: com.typesafe.akka:akka-cluster-metrics_3; View open source insights on deps.dev
Purl: pkg:maven/com.typesafe.akka/akka-cluster-metrics_3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2.10.6

Affected versions

2.*

2.6.17

2.6.18

2.6.19

2.6.20

2.6.21

2.7.0-M1

2.7.0-M2

2.7.0-M3

2.7.0-M4

2.7.0-M5

2.7.0

2.7.1

2.8.0-M1

2.8.0-M2

2.8.0-M3

2.8.0-M4

2.8.0-M5

2.8.0-M6

2.8.0

2.8.1-M1

2.8.1

2.8.2

2.8.3

2.8.4

2.8.5

2.8.6

2.8.7

2.8.8

2.9.0-M1

2.9.0-M2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-358m-fq53-hp87/GHSA-358m-fq53-hp87.json"

Maven / com.typesafe.akka:akka-cluster-metrics_2.13

Package

Name: com.typesafe.akka:akka-cluster-metrics_2.13; View open source insights on deps.dev
Purl: pkg:maven/com.typesafe.akka/akka-cluster-metrics_2.13

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2.10.6

Affected versions

2.*

2.5.23

2.5.24

2.5.25

2.5.26

2.5.27

2.5.28

2.5.29

2.5.30

2.5.31

2.5.32

2.6.0-M3

2.6.0-M4

2.6.0-M5

2.6.0-M6

2.6.0-M7

2.6.0-M8

2.6.0-RC1

2.6.0-RC2

2.6.0

2.6.1

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.7

2.6.8

2.6.9

2.6.10

2.6.11

2.6.12

2.6.13

2.6.14

2.6.15-M1

2.6.15

2.6.16