com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0_akka25circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0akka25circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046654...

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0_akka24circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0akka24circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046655...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF. For older versions, endpoints protected by randomTokenCsrfProtection could be bypassed with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN cookie. Remediation Upgrade...

Cross-site Scripting (XSS)

akka-http is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as raw queries were being shown on the error message, allowing XSS attacks...

com.github.agourlay:cornichon_2.11 (>=0.10, <=0.10.1), com.github.benniekrijger:scala-mollie_2.11 (>=0.8, <=0.9) +7 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (3.0.0-rc1)

com.typesafe.akka:akka-http-core2.11 MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.github.agourlay:cornichon2.11 =0.10, =0.8, =0.2.7, =0.2.8 -...

ca.schwitzer:scaladon_2.12 (>=0.3.0, <=0.4.0-m0), ch.megard:akka-http-cors_2.12 (>=0.1.9, <=0.2.1) +120 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-rc2, <=10.0.5)

com.typesafe.akka:akka-http-core2.12 MAVEN version =10.0.0-rc2, =0.3.0, =0.1.9, =0.1.4, =4.0, =0.2.0, =3.0.7, =3.0.6, =0.11.1, =0.10.2, =0.13.0, =0.10, =0.10, =0.2.0, =0.2.1 - com.github.hayasshi:akkahttpeasyrouter2.12 0.0.1 and more Source cves: CVE-2017-1000118 Source advisory:...

com.typesafe.akka:akka-http-experimental_2.11 (2.4.2-rc3), com.typesafe.akka:akka-http-jackson-experimental_2.11 (2.4.2-rc3) +9 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.2-rc3)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.2-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.typesafe.akka:akka-http-experimental2.11 2.4.2-rc3 -...

ch.megard:akka-http-cors_2.11 (>=0.1.7, <=0.1.8), com.adendamedia:cornucopia_2.11 (>=0.5.0, <=0.6.2) +75 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.11)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 =0.1.7, =0.5.0, =1.4.1, =3.0.0, =2.4.1, =0.10.0, =0.5,...

com.github.benniekrijger:scala-postnl_2.11 (0.6), com.typesafe.akka:akka-http-experimental_2.11 (2.4.9-rc2) +9 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.9-rc2)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.9-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.github.benniekrijger:scala-postnl2.11 0.6 -...

com.typesafe.akka:akka-http-experimental_2.11 (2.4-artery-m4), com.typesafe.akka:akka-http-jackson-experimental_2.11 (2.4-artery-m4) +3 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4-artery-m4)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4-artery-m4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.typesafe.akka:akka-http-experimental2.11 2.4-artery-m4 -...

ch.megard:akka-http-cors_2.11 (0.1.4), com.geteventstore:eventstore-client_2.11 (2.4.0) +38 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.8)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 0.1.4 - com.geteventstore:eventstore-client2.11 2.4.0 -...

ch.megard:akka-http-cors_2.11 (0.1.3), co.pragmati:swagger-ui-akka-http_2.11 (0.1.0) +30 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.7)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 0.1.3 - co.pragmati:swagger-ui-akka-http2.11 0.1.0 -...

ch.megard:akka-http-cors_2.11 (0.1.2), com.auginte:scarango_2.11 (0.3.1) +45 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.4)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 0.1.2 - com.auginte:scarango2.11 0.3.1 -...

ch.megard:akka-http-cors_2.11 (0.1.1), com.github.agourlay:cornichon_2.11 (>=0.7.0, <=0.7.1) +25 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.3)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 0.1.1 - com.github.agourlay:cornichon2.11 =0.7.0, =0.0.1,...

com.typesafe.akka:akka-http-experimental_2.11 (2.4-artery-m2), com.typesafe.akka:akka-http-jackson-experimental_2.11 (2.4-artery-m2) +3 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4-artery-m2)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4-artery-m2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.typesafe.akka:akka-http-experimental2.11 2.4-artery-m2 -...

GHSA-GFX6-PH4Q-Q54Q Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

co.pragmati:swagger-ui-akka-http_2.11 (1.0.0), com.typesafe.akka:akka-http-experimental_2.11 (2.4.11.2) +11 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.11.2)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - co.pragmati:swagger-ui-akka-http2.11 1.0.0 -...

ch.megard:akka-http-cors_2.11 (0.1.5), com.github.agourlay:cornichon_2.11 (0.9) +33 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.9)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - ch.megard:akka-http-cors2.11 0.1.5 - com.github.agourlay:cornichon2.11 0.9 -...

com.github.benniekrijger:scala-mollie_2.11 (0.3), com.github.benniekrijger:scala-postnl_2.11 (0.5) +5 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (2.4.9-rc1)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.9-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.github.benniekrijger:scala-mollie2.11 0.3 -...

ca.schwitzer:scaladon_2.11 (>=0.3.1, <=0.4.0-m0), ch.becompany:akka-social-stream_2.11 (>=0.1.0, <=0.1.1) +185 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (>=10.0.0-rc2, <=10.0.5)

com.typesafe.akka:akka-http-core2.11 MAVEN version =10.0.0-rc2, =0.3.1, =0.1.0, =0.1.9, =1.2.2, =0.1.4, =4.0, =0.2.0, =3.0.7, =3.0.5, =v0.0.9, =v0.0.9, =0.11.1, =0.10.2, =0.10, =0.15 and more Source cves: CVE-2017-1000118 Source advisory: OSV:GHSA-GFX6-PH4Q-Q54Q...