sbt
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| sbt | 2 | – | Mar 24, 2026 |
Exploited and recent CVEs
- CVE-2026-32948 sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows 0.3%
- CVE-2023-46122 Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt 0.4%