CVE Tools
Track your stack

Akka

2 CVEs tracked since 2017. Since Jul 2017, none of them reached CISA KEV.

Akka CVEs per month

Jul 2017 to Oct 2017. Point at a month, or focus the strip and use the arrow keys.
Akka CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2017-0710
2017-08null or fewer
2017-09null or fewer
2017-1010

Products

The products that kept showing up in Akka's monthly top three, with their CVEs summed over those months.

  1. Akka11 month
  2. HTTP Server11 month

Latest CVEs

The 6 most recently published vulnerabilities affecting Akka.

  1. CVE-2025-53393In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.6.0
  2. CVE-2025-46548Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective6.5
  3. CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.7.5
  4. CVE-2021-42697Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a...7.5
  5. CVE-2017-1000118Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service7.5
  6. CVE-2017-1000034Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem.8.1

The record

Peak rank
#198 in Jul 2017
Busiest month shown
Jul 2017, 1 CVEs
Months with a KEV entry
0 since Jul 2017
Monthly snapshots
2 since 2017
Akka's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store