GitHub Advisoryadvisory · Maven
GHSA-358m-fq53-hp87 akka-cluster-metrics uses Java serialization for cluster metrics
MEDIUM
Official page ↗
- Aliases
- CVE-2025-53393
- Ecosystem
- Maven
- Packages
- com.typesafe.akka:akka-cluster-metrics_3, com.typesafe.akka:akka-cluster-metrics_2.13
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
- Weaknesses
- CWE-502
- Reviewed
- 2025-06-30
Affected packages
• Maven com.typesafe.akka:akka-cluster-metrics_3: <= 2.10.6 (no fix yet)
• Maven com.typesafe.akka:akka-cluster-metrics_2.13: <= 2.10.6 (no fix yet)
Description
In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.
Related
Alias · CVE (1)
- CVE-2025-53393 In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics. vulnerability
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness