com.ing.baker:bakery-interaction-k8s-interaction-manager_2.13 (>=3.6.2, <=5.0.0), com.ing.baker:bakery-state-k8s_2.13 (3.5.0) +8 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.13 (>=2.6.11, <=2.9.0-m2)

com.typesafe.akka:akka-cluster-metrics2.13 MAVEN version =2.6.11, =3.6.2, =3.5.0, =22.10.0-m1, =0.1.6, =2.9.1, =3.30.0, =3.31.0 Source cves: CVE-2025-53393 Source advisory: OSV:GHSA-358M-FQ53-HP87...

com.lightbend.akka:akka-platform-dependencies_2.13 (0.1.6), com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.13 (2.1.0) +5 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (2.1.0)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.13 and may be impacted: - com.lightbend.akka:akka-platform-dependencies2.13 0.1.6 -...