Scala-sbt vulnerabilities
We track 1 vulnerability in Scala-sbt products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2023.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Scala-sbt vulnerabilities
- 7.1 High severity
sbt: Improper Limitation of a Pathname to a Restricted Directory
sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of arbitrary file. This would have potential to overwrite `/root/.ssh/authorized_keys`. Within sbt's main code, `IO.unzip` is used in `pullRem