Akka Cluster Metrics Java Serialization Vulnerability

A vulnerability exists in Akka versions through 2.10.6, where the cluster metrics module improperly utilizes Java serialization for metrics data. This issue could lead to serialization errors, particularly during rolling updates, although such errors are expected to resolve once the update process is complete.

Impact

The use of Java serialization for cluster metrics could cause serialization errors, especially during rolling updates, potentially disrupting the update process.

Remediation

Users can upgrade to Akka version 2.10.7 or later, where this vulnerability has been addressed.