Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/38698?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38698?format=api", "vulnerability_id": "VCID-w6y4-vpy7-8bcf", "summary": "Deserialization of Untrusted Data\nAkka is vulnerable to a java deserialization attack in its remoting component, resulting in remote code execution in the context of the ActorSystem.", "aliases": [ { "alias": "CVE-2017-1000034" }, { "alias": "GHSA-mm57-9j6q-rxm2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53810?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor@2.4.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor@2.4.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56915?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56916?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.17" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53808?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor@2.4.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor@2.4.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/53809?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor@2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor@2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/227731?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227732?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227733?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/227734?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/227735?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/227736?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/227737?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/227738?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/227739?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/227740?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/227741?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/227742?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/227743?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/227744?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/227745?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/227746?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227747?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227748?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-M3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227749?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227750?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227751?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0-RC3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227752?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/227753?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227754?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227755?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227756?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4-ARTERY-M4" }, { "url": "http://public2.vulnerablecode.io/api/packages/227757?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227758?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227759?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227760?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2-RC3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227761?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227762?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/227763?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/227764?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/227765?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/227766?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/227767?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/227768?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227769?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9-RC2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9-RC2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227770?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/227771?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/227772?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/227773?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/227774?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.11.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/227775?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/227776?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/227777?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/227778?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/227779?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.11@2.4.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/227780?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/227781?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/227782?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/227783?format=api", "purl": "pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-w6y4-vpy7-8bcf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.typesafe.akka/akka-actor_2.12@2.4.16" } ], "references": [ { "reference_url": "http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000034.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000034.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000034", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.11724", "scoring_system": "epss", "scoring_elements": "0.93832", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.11724", "scoring_system": "epss", "scoring_elements": "0.93823", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.11724", "scoring_system": "epss", "scoring_elements": "0.93831", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000034" }, { "reference_url": "https://github.com/akka/akka/commit/cc6561b47e5958923df520b8a9514010d3e11d49", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/akka/akka/commit/cc6561b47e5958923df520b8a9514010d3e11d49" }, { "reference_url": "https://github.com/akka/akka/issues/22283", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/akka/akka/issues/22283" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484938", "reference_id": "1484938", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484938" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000034", "reference_id": "CVE-2017-1000034", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000034" }, { "reference_url": "https://github.com/advisories/GHSA-mm57-9j6q-rxm2", "reference_id": "GHSA-mm57-9j6q-rxm2", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mm57-9j6q-rxm2" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 502, "name": "Deserialization of Untrusted Data", "description": "The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 78, "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w6y4-vpy7-8bcf" }