Package · Maven

com.typesafe.akka:aakka-http-core_2.13.0-M3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2021-42697 Public exploit EPSS 36%

Uncontrolled Recursion in Akka HTTP

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments.

com.typesafe.akka:akka-http-core_2.11 com.typesafe.akka:akka-http-core_2.12 com.typesafe.akka:akka-http-core_2.13 com.typesafe.akka:akka-http-core_2.13.0-RC2 Maven

Nov 2, 2021