Vendor

    Lightbend

    20 known vulnerabilities in products by Lightbend, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Lightbend
    CriticalCVE-2014-3630

    Lightbend Play Framework: XML External Entity (XXE)

    		9.8
    HighCVE-2015-2156

    Lightbend Play Framework: Information Disclosure

    also in 1 other product

    		7.5
    HighCVE-2018-13864

    Lightbend Play Framework: Path Traversal

    		7.5
    HighCVE-2018-16131

    Lightbend Akka HTTP: Denial of Service

    		7.5
    HighCVE-2018-18853

    Lightbend spray-json: Denial of Service

    		7.5
    HighCVE-2018-18854

    Lightbend spray-json: Denial of Service

    		7.5
    HighCVE-2022-31018

    Denial of service binding form from JSON in Play Framework

    		7.5
    CriticalCVE-2018-16115

    Lightbend Akka: security vulnerability

    		9.1
    HighCVE-2020-26882

    Lightbend Play Framework: security vulnerability

    		7.5
    HighCVE-2020-27196

    Lightbend Play Framework: Denial of Service

    		7.5
    HighCVE-2020-26883

    Lightbend Play Framework: security vulnerability

    		7.5
    HighCVE-2022-31023

    Dev error stack trace leaking into prod in Play Framework

    		5.9
    MediumCVE-2025-46548

    Apache Pekko Management: Improper Authentication

    also in 3 other products

    		6.5
    HighCVE-2023-31442

    Lightbend Akka Discovery: security vulnerability

    		7.5
    HighCVE-2019-17598

    Lightbend Play Framework: security vulnerability

    		7.5
    MediumCVE-2020-12480

    Lightbend Play Framework: Cross-Site Request Forgery (CSRF)

    		6.5
    MediumCVE-2021-23339

    HTTP Request Smuggling

    		5.0
    LowCVE-2020-28923

    Lightbend Play Framework: security vulnerability

    		2.7
    MediumCVE-2023-29471

    Lightbend Alpakka Kafka: security vulnerability

    		5.5
    MediumCVE-2023-33251

    Lightbend Akka HTTP: security vulnerability

    		4.7

    Products

    Products by Lightbend
    Lightbend Play Framework110
    Lightbend Akka HTTP30