- CVE-2017-15713
- CVE-2019-16869
- CVE-2019-20444
- CVE-2019-20445
- CVE-2020-13957
- CVE-2020-36518
- CVE-2020-9492
- CVE-2021-22569
- CVE-2021-37136
Lightbend is a SOC 2 compliant organization beginning with the newest version of Akka v23.05 released April 25, 2023.
NOTE: Licensing Akka ensures organizations that the version of Akka they are running in production will have all of the latest known vulnerabilities patched and maintain compliance with the standards as listed below.
All earlier or open source versions prior to Akka v23.05 are NOT compliant. Visit Pricing for information on Akka development and production license packages.
Relevant sections from the standards for running Akka in production:
Vendor Management Process, Vendor Compliance Review
Patch Management
Vulnerability Scanning and Remediation
Software Development Lifecycle
Lightbend has committed to patch Severity 1 / Critical vulnerabilities only in the final open source version of Akka (v2.6) until September 2023.
All other vulnerabilities and bugs are only fixed and patched in licensed versions of Akka. The current licensed version of Akka (23.10) has the following vulnerabilities patched:
NOTE: Maintaining compliance with SOC 2 standards requires licensing and updating production systems to the latest version of Akka.
Visit Pricing for information on Akka development and production license packages.