org.scala-sbt:sbt
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows | org.scala-sbt:sbt | Maven | Medium | Fix reported | |
| sbt vulnerable to arbitrary file write via archive extraction (Zip Slip) | org.scala-sbt:io_2.12org.scala-sbt:io_2.13 | Maven | Low | Fix reported |