com.typesafe.akka:akka-http-core_2.13@10.2.2 vulnerabilities
latest version
10.5.3
latest non vulnerable version
first published
6 years ago
latest version published
2 years ago
licenses detected
- [10.1.8,10.4.0-M1)
package registry
Direct Vulnerabilities
Known vulnerabilities in the com.typesafe.akka:akka-http-core_2.13 package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
com.typesafe.akka:akka-http-core_2.13 is a modern, fast, asynchronous, streaming-first HTTP server and client. Affected versions of this package are vulnerable to Denial of Service (DoS) in the implementation of the HTTP/2 protocol. An attacker can cause a denial of service (including via DDoS) by rapidly resetting many streams through request cancellation. How to fix Denial of Service (DoS)? Upgrade | [,10.5.3) |
com.typesafe.akka:akka-http-core_2.13 is a modern, fast, asynchronous, streaming-first HTTP server and client. Affected versions of this package are vulnerable to Improper Resource Shutdown or Release which can encounter stack exhaustion while parsing HTTP headers. It allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. How to fix Improper Resource Shutdown or Release? Upgrade | [10.2.0-M1,10.2.7)[,10.1.15) |
com.typesafe.akka:akka-http-core_2.13 is a modern, fast, asynchronous, streaming-first HTTP server and client. Affected versions of this package are vulnerable to HTTP Request Smuggling. It allows multiple How to fix HTTP Request Smuggling? Upgrade | [10.2.0,10.2.4)[,10.1.14) |