Lightbend Akka Actor
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Lightbend Akka Actor.
By the Year
In 2026 there have been 0 vulnerabilities in Lightbend Akka Actor. Akka Actor did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 7.50 |
It may take a day or so for new Akka Actor vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Lightbend Akka Actor Security Vulnerabilities
Akka 2.52.8 DNS ID Randomness Bypass Enables DNS Poisoning
CVE-2023-31442
7.5 - High
- May 11, 2023
In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not validate (e.g., via TLS) the authenticity of the discovered service, this may result in exfiltration of application data (e.g., persistence events may be published to an unintended Kafka broker). If such validation is performed, then the poisoning constitutes a denial of access to the intended service. This affects Akka 2.5.14 through 2.8.0, and Akka Discovery through 2.8.0.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Lightbend Akka Actor or by Lightbend? Click the Watch button to subscribe.
