Known vulnerabilities in sbt

Vendor: Scala sbt
Software: sbt
Software CPE: cpe:2.3:a:scala-sbt:sbt:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting sbt sbt is affected by 4 known vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144509 - Improper Control of Generation of Code ('Code Injection')
CWE-94 High
No
No
1.13.0, 2.0.7 21.08.2026 SB2026082122
#VU128316 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-32948
CWE-78 Medium
No
No
1.12.7 28.04.2026 SB2026042855
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
1.10.3 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU83435 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-46122
CWE-22 Medium
No
No
1.9.7 22.11.2023 SB2023112240
SB2023112241
SB2024091602
and 2 more