201 matches found
EUVD-2021-1049
Malware in sbrugna...
EUVD-2022-3429
Malicious code in bioql PyPI...
EUVD-2023-0335
Malicious code in bioql PyPI...
EUVD-2025-27048
Malicious code in bioql PyPI...
com.47deg:freestyle-http-http4s_2.11 (0.1.0), com.azavea.geotrellis:geotrellis-server-core_2.11 (>=4.0.1, <=4.2.0) +197 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.11 (>=0.9.1, <=2.1.0)
co.fs2:fs2-io2.11 MAVEN version =0.9.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =5.0.0-m1, =1.3.0, =0.1.0, =0.0.2, =0.12.7, =0.12.7, =0.12.7, =0.14.1, =0.16.1 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-13180115...
PT-2025-36337
Name of the Vulnerable Software and Affected Versions: fs2 versions 3.12.2 and lower fs2 versions 3.13.0-M1 through 3.13.0-M6 Description: fs2, a compositional, streaming I/O library for Scala, is susceptible to denial of service attacks through TLS sessions when using fs2-io on the JVM with the...
Linux Distros Unpatched Vulnerability : CVE-2017-15288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in...
Linux Distros Unpatched Vulnerability : CVE-2022-36944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java...
Malicious code in test-mlw2-mucro-scala (npm)
The package test-mlw2-mucro-scala was found to contain malicious code...
MAL-2025-35820 Malicious code in test-mlw2-mucro-scala (npm)
The package test-mlw2-mucro-scala was found to contain malicious code...
Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file
Summary Scala could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in LazyList. By sending specially-crafted request using gadget chain, an attacker could exploit this vulnerability to execute arbitrary code, erase contents of...
cc.akkaha:asura-cluster_2.12 (>=0.2.0, <=0.6.0), com.adobe.api.platform.runtime:mesos-actor (>=0.0.8_2.12, <=0.0.33) +42 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.12 (>=2.4.16, <=2.7.0)
com.typesafe.akka:akka-cluster-metrics2.12 MAVEN version =2.4.16, =0.2.0, =0.0.82.12, =3.6.0, =3.3.0, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =3.2.0-35 and more Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567747...
CVE-2023-22465
Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38, the User-Agent and Server header parsers are susceptible to a fatal error on certain inputs. In http4s, modeled headers are lazily parsed, so this only applie...
CVE-2020-7907
In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections...
CVE-2014-125001
A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended...
Scala Stream Collector 安全漏洞
Scala Stream Collector is a Snowplow open source collector for cloud-native web, mobile and event analytics. A security vulnerability exists in Scala Stream Collector versions prior to 3.3.0, which stems from the fact that sending an oversized load may cause the service to become unavailable...
CVE-2021-39185
Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configuration is vulnerable to an origin reflection attack. The middleware is also susceptible to a Null...
GHSA-P953-3J66-HG45 vulnerabilities
Vulnerabilities for packages: spark-scala-2.13...
