com.typesafe.akka:akka-http-spray-json-experimental_2.12.0-M3 (>=2.4.2 <=2.4.3) potentially affected by CVE-2018-18855 via io.spray:spray-json_2.12.0-M3 (=1.3.2)

io.spray:spray-json2.12.0-M3 MAVEN version =1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.spray:spray-json2.12.0-M3 and may be impacted: - com.typesafe.akka:akka-http-spray-json-experimental2.12.0-M3 =2.4.2, =2.4.3 Source cves: CVE-2018-1885...

com.typesafe.akka:akka-http-spray-json-experimental_2.12.0-M5 (=2.4.8) potentially affected by CVE-2018-18855 via io.spray:spray-json_2.12.0-M5 (=1.3.2)

io.spray:spray-json2.12.0-M5 MAVEN version =1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.spray:spray-json2.12.0-M5 and may be impacted: - com.typesafe.akka:akka-http-spray-json-experimental2.12.0-M5 =2.4.8 Source cves: CVE-2018-18855 Source...