What’s Vulnerable › Products

sbt vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your sbt version is affected

Latest sbt vulnerabilities

• CVE-2026-32948 — sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows (CVSS 7.8)