Scala-lang

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Scala-lang records in CISA KEV

No Scala-lang vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scala 2 records HIGH Scala-collection-compat 1 record HIGH

Records

2 records

TI-2022-17150 CVE-2022-36944 · GHSA-8qv5-68g4-248j

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file.

HIGH 82

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10968 Published 2022-09-23 Partial fix · 2.13.9 CWE-502

TI-2017-11203 CVE-2017-15288 · GHSA-qvxv-pmq9-4q7g

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before…

LOW 34

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2017-11-15 Partial fix · 2.10.7, 2.11.12 +1 CWE-732

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0