{"id":"scala-151d0a8708c7","seq":2888,"kind":"release","title":"Fixing a remote execution vulnerability in sbt","url":"https://www.scala-lang.org/blog/2026/08/10/sbt-remote-tcp-advisory.html","permalink":"https://vulnpulse.app/items/scala-151d0a8708c7","summary":"This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . TL;DR Only builds that explicitly set serverConnectionType are affected. You can remove the setting from your build, or upgrade to sbt 1.12.15 / sbt 2.0.6 or later by putting the following in project/build.properties : sbt . version = 1.12 . 15 Note that installing a new sbt command does not affect the sbt version used by each individual build. The vulnerability As part of our ongoing work on the sbt 2 release, we’ve been reviewing…","severity":null,"techs":["scala"],"cves":[],"tags":["security"],"source":{"id":"scala","name":"Scala News"},"published_at":"2026-08-09T22:00:00.000Z","fetched_at":"2026-10-21T16:17:48.018Z"}