Io vulnerabilities

1 known vulnerability in Io from Scala-sbt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  sbt: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-46122Oct 23, 2023Sbt

  sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of arbitrary file. This would have potential to overwrite `/root/.ssh/authorized_keys`. Within sbt's main code, `IO.unzip` is used in `pullRem