sbt

Products

ProductCVEsExploitedLatest
sbt2–Mar 24, 2026

Exploited and recent CVEs

  • CVE-2026-32948 Medium 6.7 sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows 0.3%
  • CVE-2023-46122 Low 3.9 Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt 0.4%