{"action":"Upgrade com.typesafe.akka:akka-actor to 2.4.17 or later.","affected":[{"fixed":"2.4.17","introduced":"0"}],"component":"com.typesafe.akka:akka-actor","cve_ids":["CVE-2017-1000034"],"ecosystem":"Maven","epss":0.06187,"exploited":false,"fixed_versions":["2.4.17"],"ghsa_id":"GHSA-mm57-9j6q-rxm2","id":"tcs_01M5N95C11XAF79VQ1886VTSM4","modified_at":"2023-11-08T03:58:41.898178Z","published_at":"2018-10-22T20:52:38Z","references":["https://osv.dev/vulnerability/GHSA-mm57-9j6q-rxm2","https://nvd.nist.gov/vuln/detail/CVE-2017-1000034","https://github.com/akka/akka/issues/22283","https://github.com/akka/akka/commit/cc6561b47e5958923df520b8a9514010d3e11d49","https://github.com/advisories/GHSA-mm57-9j6q-rxm2","http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-mm57-9j6q-rxm2","url":"https://osv.dev/vulnerability/GHSA-mm57-9j6q-rxm2"}],"summary":"Akka Java Serialization vulnerability"}