Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.4.16"
},
{
"introduced": "0"
},
{
"last_affected": "2.5-m1"
}
]
}