CyberSecBulletin

Scala-lang vulnerabilities

We track 1 vulnerability in Scala-lang products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Scala-lang vulnerabilities

  • 9.8 Critical severity

    Scala: Deserialization of Untrusted Data

    CVE-2022-36944Scala-langEPSS 11%

    Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java object deserialization within an application. In such situations, it allows attackers to erase conten