PatchTheCVElightbend vulnerabilities
Recent CVEs affecting lightbend products. 3 tracked.
lightbend has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-05-21. Highest priority: CVE-2023-31442 (score 44/100).
- CVE-2023-33251 MEDIUM 4.7 UPGRADE When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the te
- CVE-2023-31442 HIGH 7.5 UPGRADE UPGRADE In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Clus
- CVE-2023-29471 MEDIUM 5.5 UPGRADE Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may conta
FAQ
How do I fix lightbend vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lightbend being exploited right now?
None of the tracked lightbend CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lightbend CVE should I patch first?
CVE-2023-31442 currently ranks highest (44/100): In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Clus.