Lightbend

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Lightbend records in CISA KEV

No Lightbend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Play Framework 11 records MEDIUM Akka Http 2 records LOW Spray-json 2 records LOW Akka 1 record MEDIUM Akka-http 1 record LOW Akka Actor 1 record MEDIUM Akka Discovery 1 record MEDIUM Alpakka Kafka 1 record LOW

Records

2 records in Spray-json · all components

TI-2018-13356 CVE-2018-18854 · GHSA-q8xj-8xg3-w432

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of…

LOW 37

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have th…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01897 Published 2018-10-31 Fixed in 1.3.5 CWE-400

TI-2018-13355 CVE-2018-18853 · GHSA-f94m-mqhr-mc29

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of…

LOW 37

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01897 Published 2018-10-31 Fixed in 1.3.5 CWE-400

Open these records in search →

Critical	2
High	12
Medium	5
Low	1
No CVSS	0