PatchTheCVEakka http vulnerabilities and fixes
Recent CVEs affecting akka http, with upgrade or downgrade steps. 1 tracked.
Also searched as: akkahttp.
akka http has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-05-21. Highest priority: CVE-2023-33251 (score 18/100).
- CVE-2023-33251 MEDIUM 4.7 UPGRADE When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the te
FAQ
How do I fix akka http vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is akka http being exploited right now?
None of the tracked akka http CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which akka http CVE should I patch first?
CVE-2023-33251 currently ranks highest (18/100): When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the te.