{"action":"Upgrade org.apache.pekko:pekko-management_2.13 to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"org.apache.pekko:pekko-management_2.13","cve_ids":["CVE-2025-46548"],"ecosystem":"Maven","epss":0.00749,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-9qvj-rpj8-v5c8","id":"tcs_01M5N8QKNKZASKP91D7DQCXQA2","modified_at":"2025-11-14T16:45:51.210858Z","published_at":"2025-06-03T15:31:27Z","references":["https://osv.dev/vulnerability/GHSA-9qvj-rpj8-v5c8","https://nvd.nist.gov/vuln/detail/CVE-2025-46548","https://github.com/akka/akka-management/pull/1385","https://github.com/apache/pekko-management/pull/418","https://lists.apache.org/thread/tnd84hj9w0ggjcft6cp12q67d5jzhp66","http://www.openwall.com/lists/oss-security/2025/06/03/7"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9qvj-rpj8-v5c8#Maven/org.apache.pekko:pekko-management_2.13","url":"https://osv.dev/vulnerability/GHSA-9qvj-rpj8-v5c8"}],"summary":"Pekko Management may not properly apply authenticator when Basic Authentication is enabled"}