CVE-2021-42697

Akka HTTP 10.1.x 10.1.15 से पहले और 10.2.x 10.2.7 से पहले HTTP हेडर पार्स करते समय स्टैक थकावट stack exhaustion का सामना कर सकते हैं, जो एक दूरस्थ हमलावर को गहराई से नेस्टेड टिप्पणियों के साथ User-Agent हेडर भेजकर सेवा अस्वीकृति Denial of Service हमला करने की अनुमति देता है। संदर्भ MITRE Akka ब्ल...

EUVD-2018-0601

Malware in sbrugna...

EUVD-2018-0565

Malware in sbrugna...

EUVD-2021-0909

Malware in sbrugna...

EUVD-2022-0445

Malicious code in bioql PyPI...

EUVD-2022-1143

Malicious code in bioql PyPI...

EUVD-2023-37419

Malicious code in bioql PyPI...

CVE-2023-33251

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments...

CVE-2017-1000118

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

HTTP Request/Response Smuggling

com.typesafe.akka:akka-http-core is vulnerable to HTTP Request/Response Smuggling. The vulnerability is due to accepting malformed messages and handing them over to the user application, which may proxy them to another server without inspection, allowing unintended HTTP requests to reach downstre...

Information Disclosure

com.typesafe.akka:akka-http is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to of sensitive information due to the creation of temporary files with weak permissions via the FileUploadDirectives.fileUploadAll directive...

CVE-2023-33251

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

CVE-2023-33251

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

Design/Logic Flaw

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

CVE-2023-33251

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

CVE-2023-33251

CVE-2023-33251 affects Akka HTTP prior to 10.5.2 where FileUploadDirectives.fileUploadAll creates a temporary file with overly permissive permissions, allowing other users on Unix-like systems to read it. This is an information disclosure risk tied to temporary-file handling in the file upload pa...

Lightbeed Akka Akka-http 安全漏洞

Lightbeed Akka Akka-http is a toolkit from the Lightbeed community in China. It provides a more generalized toolkit for providing and using HTTP-based services. A security vulnerability exists in Lightbeed Akka Akka-http versions prior to 10.5.2, which stems from weak permissions on temporary fil...

CVE-2023-33251

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946...

Lightbeed Akka Akka-http 安全漏洞

Lightbeed Akka Akka-http is a toolkit from the Lightbeed community in China. It provides a more generalized toolkit for providing and using HTTP-based services. A security vulnerability exists in Lightbeed Akka Akka-http versions prior to 2.8.1. An attacker exploited the vulnerability to cause an...