Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.scala-sbt:sbt

2 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium, 1 low
Registry
Maven Central

Advisories 2

  • CVE-2026-32948Medium 6.7

    sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows

    Affected: from 0.9.5, fixed in 1.12.8.

  • Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt

    Affected: from 0.3.4, fixed in 1.9.7.