{"action":"Upgrade com.lightbend.akka.management:akka-management_2.12 to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"0"}],"component":"com.lightbend.akka.management:akka-management_2.12","cve_ids":["CVE-2025-46548"],"ecosystem":"Maven","epss":0.00806,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-9qvj-rpj8-v5c8","id":"tcs_01M5N8QKYZ5W1SF85ZNYQFVB1X","modified_at":"2025-11-14T16:45:51.210858Z","published_at":"2025-06-03T15:31:27Z","references":["https://osv.dev/vulnerability/GHSA-9qvj-rpj8-v5c8","https://nvd.nist.gov/vuln/detail/CVE-2025-46548","https://github.com/akka/akka-management/pull/1385","https://github.com/apache/pekko-management/pull/418","https://lists.apache.org/thread/tnd84hj9w0ggjcft6cp12q67d5jzhp66","http://www.openwall.com/lists/oss-security/2025/06/03/7"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9qvj-rpj8-v5c8#Maven/com.lightbend.akka.management:akka-management_2.12","url":"https://osv.dev/vulnerability/GHSA-9qvj-rpj8-v5c8"}],"summary":"Pekko Management may not properly apply authenticator when Basic Authentication is enabled"}