CVE-2018-16131

—

CVSS 3.0

7.5 high

EPSS

3%p87

Published

Aug 30, 2018 (Aug 30, 2018)

Modified

Jun 17, 2026

Description

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb.

Vendors: lightbend
Products: akka http
Weakness: CWE-400
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.1%)

In the news0 stories

No ingested article mentions this CVE yet.