{"id":"CVE-2025-53393","details":"In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.","aliases":["GHSA-358m-fq53-hp87"],"modified":"2026-08-12T03:51:17.263747606Z","published":"2025-06-28T00:00:00Z","database_specific":{"cna_assigner":"mitre","cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53393.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53393.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53393"},{"type":"FIX","url":"https://github.com/akka/akka/pull/32748"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/akka/akka-core","events":[{"introduced":"0"},{"fixed":"0dc090eaa3de95f0fcea5a00f297d5df20e7bd93"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"2.10.6"},{"fixed":"2.10.6"}],"source":["AFFECTED_FIELD","DESCRIPTION"]}}],"versions":["v2.10.5","v2.10.4","v2.10.3","v2.10.2","v2.10.1","v2.10.0","v2.10.0-M1","2.10.0-M1","v2.9.5","v2.9.4","v2.9.3","v2.9.2","v2.9.1","v2.9.1-M1","v2.9.0","v2.9.0-M3","v2.9.0-M2","v2.8.4","v2.9.0-M1","v2.8.3","v2.8.2","v2.8.1","v2.8.1-M1","v2.8.0","v2.8.0-M6","v2.8.0-M5","v2.8.0-M4","v2.8.0-M3","v2.8.0-M2","v2.8.0-M1","v2.7.0","v2.7.0-M5","v2.7.0-M4","v2.7.0-M3","v2.7.0-M2","v2.7.0-M1","v2.6.20","v2.6.19","v2.6.18","v2.6.17","v2.6.16","v2.6.15","v2.6.14","2.6.14","v2.6.13","v2.6.12","v2.6.11","v2.6.10","v2.6.9","v2.6.8","v2.6.7","v2.6.6","v2.6.5","v2.6.4","v2.6.3","v2.6.2","v2.6.1","v2.6.0","v2.6.0-RC2","v2.6.0-RC1","v2.6.0-M8","v2.6.0-M7","v2.6.0-M6","v2.6.0-M5","v2.6.0-M4","v2.6.0-M3","v2.6.0-M2","master-pre-2.10","v0.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53393.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L"}]}