You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows
Moderate severity
GitHub Reviewed
Published
Mar 24, 2026
in
sbt/sbt
•
Updated Mar 27, 2026