Maven/com.typesafe.akka:akka-actor_2.11 CVE-2018-16115: critical 9.1
Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor
Action: Upgrade com.typesafe.akka:akka-actor_2.11 to 2.5.16 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 2.5.16 | - |
Fixed versions
| 2.5.16 |
Sources
- osv: GHSA-mr95-9rr4-668f
- https://nvd.nist.gov/vuln/detail/CVE-2018-16115
- https://doc.akka.io/docs/akka/current/security/2018-08-29-aes-rng.html
- https://github.com/advisories/GHSA-mr95-9rr4-668f
CVE-2018-16115 · published · modified · JSON