Lightbend

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Lightbend records in CISA KEV

No Lightbend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Play Framework 11 records MEDIUM Akka Http 2 records LOW Spray-json 2 records LOW Akka 1 record MEDIUM Akka-http 1 record LOW Akka Actor 1 record MEDIUM Akka Discovery 1 record MEDIUM Alpakka Kafka 1 record LOW

Records

1 record in Akka Discovery · all components

TI-2023-15058 CVE-2023-31442 · GHSA-529c-69qr-5h7m

In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and…

MEDIUM 40

In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00645 Published 2023-05-11 No fix listed

Open these records in search →

Critical	2
High	12
Medium	5
Low	1
No CVSS	0