## Fixing a remote execution vulnerability in sbt

- 種別: release
- 関連技術: scala
- 公開日時: 2026-08-09T22:00:00.000Z
- 情報源: Scala News (https://www.scala-lang.org/blog/2026/08/10/sbt-remote-tcp-advisory.html)
- パーマリンク: https://vulnpulse.app/items/scala-151d0a8708c7

This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . TL;DR Only builds that explicitly set serverConnectionType are affected. You can remove the setting from your build, or upgrade to sbt 1.12.15 / sbt 2.0.6 or later by putting the following in project/build.properties : sbt . version = 1.12 . 15 Note that installing a new sbt command does not affect the sbt version used by each individual build. The vulnerability As part of our ongoing work on the sbt 2 release, we’ve been reviewing…