{"id":"CVE-2025-53393","details":"In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.","aliases":["GHSA-358m-fq53-hp87"],"modified":"2026-04-10T05:38:04.431217Z","published":"2025-06-28T23:15:21.760Z","references":[{"type":"FIX","url":"https://github.com/akka/akka/pull/32748"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/akka/akka-core","events":[{"introduced":"0"},{"last_affected":"0dc090eaa3de95f0fcea5a00f297d5df20e7bd93"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"2.10.6"}]}}],"versions":["2.10.0-M1","2.6.14","master-pre-2.10","v0.5","v2.10.0","v2.10.0-M1","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.10.6","v2.6.0","v2.6.0-M2","v2.6.0-M3","v2.6.0-M4","v2.6.0-M5","v2.6.0-M6","v2.6.0-M7","v2.6.0-M8","v2.6.0-RC1","v2.6.0-RC2","v2.6.1","v2.6.10","v2.6.11","v2.6.12","v2.6.13","v2.6.14","v2.6.15","v2.6.16","v2.6.17","v2.6.18","v2.6.19","v2.6.2","v2.6.20","v2.6.3","v2.6.4","v2.6.5","v2.6.6","v2.6.7","v2.6.8","v2.6.9","v2.7.0","v2.7.0-M1","v2.7.0-M2","v2.7.0-M3","v2.7.0-M4","v2.7.0-M5","v2.8.0","v2.8.0-M1","v2.8.0-M2","v2.8.0-M3","v2.8.0-M4","v2.8.0-M5","v2.8.0-M6","v2.8.1","v2.8.1-M1","v2.8.2","v2.8.3","v2.8.4","v2.9.0","v2.9.0-M1","v2.9.0-M2","v2.9.0-M3","v2.9.1","v2.9.1-M1","v2.9.2","v2.9.3","v2.9.4","v2.9.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53393.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L"}]}