Approved changes feed: RSS · Atom
cpe:2.3:a:scala-lang:scala:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Scala Lang (38604b7b-30c4-5333-b7a4-da4504e4504b) |
|---|---|
| Product | Scala (79233ac6-7ca2-5b7f-b54e-43cf03a0f465) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/scala |
purl2cpe | 2026-06-01 10:15:13.656239 |
pkg:deb/ubuntu/scala |
purl2cpe | 2026-06-01 10:15:13.656242 |
pkg:github/scala/scala |
purl2cpe | 2026-06-01 10:15:13.656245 |
pkg:rpm/centos/scala |
purl2cpe | 2026-06-01 10:15:13.656248 |
pkg:rpm/fedora/scala |
purl2cpe | 2026-06-01 10:15:13.656250 |
pkg:rpm/opensuse/scala |
purl2cpe | 2026-06-01 10:15:13.656253 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-36944 |
vulnerable | 2026-06-08 05:46:08.117905 |
Details available
Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java object deserialization within an application. In such situations, it allows attackers to erase contents of arbitrary files, make network connections, or possibly run arbitrary code (specifically, Function0 functions) via a gadget chain.
Published: 2022-09-23T00:00:00.000Z
Updated: 2025-05-27T14:56:43.802Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15288 |
vulnerable | 2026-06-08 05:08:58.214362 |
Details available
The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges.
Published: 2017-11-15T16:00:00.000Z
Updated: 2024-08-05T19:50:16.493Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.