Description
In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Akka | Akka | ≤ 2.10.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.typesafe.akka:akka-cluster-metrics_2.13 | <= 2.10.6 | — | GHSA-358m-fq53-hp87 |
| Maven | com.typesafe.akka:akka-cluster-metrics_3 | <= 2.10.6 | — | GHSA-358m-fq53-hp87 |