https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-33251.htmlhttps://patchthecve.com/cve/CVE-2023-33251.htmlWed, 17 Jun 2026 06:01:24 +0000MEDIUM 4.7: When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946.https://patchthecve.com/cve/CVE-2023-31442.htmlhttps://patchthecve.com/cve/CVE-2023-31442.htmlWed, 17 Jun 2026 05:56:57 +0000HIGH 7.5: In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not vahttps://patchthecve.com/cve/CVE-2023-29471.htmlhttps://patchthecve.com/cve/CVE-2023-29471.htmlWed, 17 Jun 2026 05:50:07 +0000MEDIUM 5.5: Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.https://patchthecve.com/cve/CVE-2022-31023.htmlhttps://patchthecve.com/cve/CVE-2022-31023.htmlWed, 17 Jun 2026 04:44:37 +0000MEDIUM 5.9: Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configurhttps://patchthecve.com/cve/CVE-2022-31018.htmlhttps://patchthecve.com/cve/CVE-2022-31018.htmlWed, 17 Jun 2026 04:44:36 +0000HIGH 7.5: Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` method on a JSON request body or the `Form