{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-32948", "tracking": { "current_release_date": "2026-03-29T01:16:19.861063Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-32948", "initial_release_date": "2026-03-24T20:52:04.935919Z", "revision_history": [ { "date": "2026-03-24T20:52:04.935919Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (125).| Product Identifiers created (163).| Products created (39).| References created (4).| CWES updated (1)." }, { "date": "2026-03-24T20:52:20.074865Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-24T20:53:47.777673Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-03-24T20:53:51.235116Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-24T20:55:45.728047Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (4).| CWES updated (1)." }, { "date": "2026-03-24T20:55:48.508869Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-25T00:37:29.820294Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Identifiers created (3).| Product Remediations created (6).| Products created (3).| References created (6).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-03-25T00:37:32.343354Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-25T01:00:12.387991Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-03-25T01:00:15.495117Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-03-25T14:39:16.137659Z", "number": "11", "summary": "Unknown change." }, { "date": "2026-03-25T14:39:18.579145Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-03-26T00:51:17.606797Z", "number": "13", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-26T00:51:28.106901Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-26T04:38:58.046640Z", "number": "15", "summary": "Unknown change." }, { "date": "2026-03-26T21:25:25.914211Z", "number": "16", "summary": "CVSS created.| Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-03-26T21:25:27.722485Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-03-28T07:57:49.353533Z", "number": "18", "summary": "Description removed for source.| Description created for source.| References created (1)." }, { "date": "2026-03-28T07:57:52.530918Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-03-28T08:10:42.549020Z", "number": "20", "summary": "Description removed for source.| Description created for source.| References removed (1)." }, { "date": "2026-03-29T01:16:18.941535Z", "number": "21", "summary": "Description removed for source.| Description created for source.| References created (1)." } ], "status": "interim", "version": "21" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439300", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439302", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439304", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5903710" } } ], "category": "product_name", "name": "sbt" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5903711" } } ], "category": "product_name", "name": "sbt" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5903712" } } ], "category": "product_name", "name": "sbt" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.99.2", "product": { "name": "vers:unknown/0.99.2", "product_id": "CSAFPID-4937850", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@0.99.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.99.4", "product": { "name": "vers:unknown/0.99.4", "product_id": "CSAFPID-4937851", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@0.99.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0", "product": { "name": "vers:unknown/1.0.0", "product_id": "CSAFPID-4937852", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m1", "product": { "name": "vers:unknown/1.0.0-m1", "product_id": "CSAFPID-4937853", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m2", "product": { "name": "vers:unknown/1.0.0-m2", "product_id": "CSAFPID-4937854", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m3", "product": { "name": "vers:unknown/1.0.0-m3", "product_id": "CSAFPID-4937855", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m4", "product": { "name": "vers:unknown/1.0.0-m4", "product_id": "CSAFPID-4937856", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m5", "product": { "name": "vers:unknown/1.0.0-m5", "product_id": "CSAFPID-4937857", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-m6", "product": { "name": "vers:unknown/1.0.0-m6", "product_id": "CSAFPID-4937858", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-M6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-rc1", "product": { "name": "vers:unknown/1.0.0-rc1", "product_id": "CSAFPID-4937859", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-rc2", "product": { "name": "vers:unknown/1.0.0-rc2", "product_id": "CSAFPID-4937860", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-rc3", "product": { "name": "vers:unknown/1.0.0-rc3", "product_id": "CSAFPID-4937861", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.0-RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.1", "product": { "name": "vers:unknown/1.0.1", "product_id": "CSAFPID-4937862", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.2", "product": { "name": "vers:unknown/1.0.2", "product_id": "CSAFPID-4937863", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.3", "product": { "name": "vers:unknown/1.0.3", "product_id": "CSAFPID-4937864", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.4", "product": { "name": "vers:unknown/1.0.4", "product_id": "CSAFPID-4937865", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-4937866", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0-m1", "product": { "name": "vers:unknown/1.1.0-m1", "product_id": "CSAFPID-4937867", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0-rc1", "product": { "name": "vers:unknown/1.1.0-rc1", "product_id": "CSAFPID-4937868", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0-rc2", "product": { "name": "vers:unknown/1.1.0-rc2", "product_id": "CSAFPID-4937869", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0-rc3", "product": { "name": "vers:unknown/1.1.0-rc3", "product_id": "CSAFPID-4937870", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0-RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0-rc4", "product": { "name": "vers:unknown/1.1.0-rc4", "product_id": "CSAFPID-4937871", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.0-RC4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.1", "product": { "name": "vers:unknown/1.1.1", "product_id": "CSAFPID-4937872", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.2", "product": { "name": "vers:unknown/1.1.2", "product_id": "CSAFPID-4937873", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.3", "product": { "name": "vers:unknown/1.1.3", "product_id": "CSAFPID-4937874", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.4", "product": { "name": "vers:unknown/1.1.4", "product_id": "CSAFPID-4937875", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.5", "product": { "name": "vers:unknown/1.1.5", "product_id": "CSAFPID-4937876", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.6", "product": { "name": "vers:unknown/1.1.6", "product_id": "CSAFPID-4937877", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0", "product": { "name": "vers:unknown/1.10.0", "product_id": "CSAFPID-5902512", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0-m1", "product": { "name": "vers:unknown/1.10.0-m1", "product_id": "CSAFPID-5902513", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0-rc1", "product": { "name": "vers:unknown/1.10.0-rc1", "product_id": "CSAFPID-5902514", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0-rc2", "product": { "name": "vers:unknown/1.10.0-rc2", "product_id": "CSAFPID-5902515", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.1", "product": { "name": "vers:unknown/1.10.1", "product_id": "CSAFPID-5902516", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.10", "product": { "name": "vers:unknown/1.10.10", "product_id": "CSAFPID-5902517", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.11", "product": { "name": "vers:unknown/1.10.11", "product_id": "CSAFPID-5902518", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.2", "product": { "name": "vers:unknown/1.10.2", "product_id": "CSAFPID-5902519", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.3", "product": { "name": "vers:unknown/1.10.3", "product_id": "CSAFPID-5902520", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.4", "product": { "name": "vers:unknown/1.10.4", "product_id": "CSAFPID-5902521", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.5", "product": { "name": "vers:unknown/1.10.5", "product_id": "CSAFPID-5902522", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.6", "product": { "name": "vers:unknown/1.10.6", "product_id": "CSAFPID-5902523", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.7", "product": { "name": "vers:unknown/1.10.7", "product_id": "CSAFPID-5902524", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.8", "product": { "name": "vers:unknown/1.10.8", "product_id": "CSAFPID-5902525", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.9", "product": { "name": "vers:unknown/1.10.9", "product_id": "CSAFPID-5902526", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.10.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0", "product": { "name": "vers:unknown/1.11.0", "product_id": "CSAFPID-5902527", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0-rc1", "product": { "name": "vers:unknown/1.11.0-rc1", "product_id": "CSAFPID-5902528", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0-rc2", "product": { "name": "vers:unknown/1.11.0-rc2", "product_id": "CSAFPID-5902529", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.1", "product": { "name": "vers:unknown/1.11.1", "product_id": "CSAFPID-5902530", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.2", "product": { "name": "vers:unknown/1.11.2", "product_id": "CSAFPID-5902531", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.3", "product": { "name": "vers:unknown/1.11.3", "product_id": "CSAFPID-5902532", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.4", "product": { "name": "vers:unknown/1.11.4", "product_id": "CSAFPID-5902533", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.5", "product": { "name": "vers:unknown/1.11.5", "product_id": "CSAFPID-5902534", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.6", "product": { "name": "vers:unknown/1.11.6", "product_id": "CSAFPID-5902535", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.7", "product": { "name": "vers:unknown/1.11.7", "product_id": "CSAFPID-5902536", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.11.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0", "product": { "name": "vers:unknown/1.12.0", "product_id": "CSAFPID-5902537", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0-m1", "product": { "name": "vers:unknown/1.12.0-m1", "product_id": "CSAFPID-5902538", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0-m2", "product": { "name": "vers:unknown/1.12.0-m2", "product_id": "CSAFPID-5902539", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0-rc1", "product": { "name": "vers:unknown/1.12.0-rc1", "product_id": "CSAFPID-5902540", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.1", "product": { "name": "vers:unknown/1.12.1", "product_id": "CSAFPID-5902541", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.2", "product": { "name": "vers:unknown/1.12.2", "product_id": "CSAFPID-5902542", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.3", "product": { "name": "vers:unknown/1.12.3", "product_id": "CSAFPID-5902543", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.4", "product": { "name": "vers:unknown/1.12.4", "product_id": "CSAFPID-5902544", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.5", "product": { "name": "vers:unknown/1.12.5", "product_id": "CSAFPID-5902545", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.6", "product": { "name": "vers:unknown/1.12.6", "product_id": "CSAFPID-5902546", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.12.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-4937878", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0-m1", "product": { "name": "vers:unknown/1.2.0-m1", "product_id": "CSAFPID-4937879", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0-rc1", "product": { "name": "vers:unknown/1.2.0-rc1", "product_id": "CSAFPID-4937880", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0-rc2", "product": { "name": "vers:unknown/1.2.0-rc2", "product_id": "CSAFPID-4937881", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0-rc3", "product": { "name": "vers:unknown/1.2.0-rc3", "product_id": "CSAFPID-4937882", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.0-RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.1", "product": { "name": "vers:unknown/1.2.1", "product_id": "CSAFPID-4937883", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.2", "product": { "name": "vers:unknown/1.2.2", "product_id": "CSAFPID-4937884", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.3", "product": { "name": "vers:unknown/1.2.3", "product_id": "CSAFPID-4937885", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.4", "product": { "name": "vers:unknown/1.2.4", "product_id": "CSAFPID-4937886", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.5", "product": { "name": "vers:unknown/1.2.5", "product_id": "CSAFPID-4937887", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.6", "product": { "name": "vers:unknown/1.2.6", "product_id": "CSAFPID-4937888", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.7", "product": { "name": "vers:unknown/1.2.7", "product_id": "CSAFPID-4937889", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.8", "product": { "name": "vers:unknown/1.2.8", "product_id": "CSAFPID-4937890", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.2.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0", "product": { "name": "vers:unknown/1.3.0", "product_id": "CSAFPID-4937891", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.13@1.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m1", "product": { "name": "vers:unknown/1.3.0-m1", "product_id": "CSAFPID-4937892", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m2", "product": { "name": "vers:unknown/1.3.0-m2", "product_id": "CSAFPID-4937893", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m3", "product": { "name": "vers:unknown/1.3.0-m3", "product_id": "CSAFPID-4937894", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.3.0-M3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m4", "product": { "name": "vers:unknown/1.3.0-m4", "product_id": "CSAFPID-4937895", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.12@1.3.0-M4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m5", "product": { "name": "vers:unknown/1.3.0-m5", "product_id": "CSAFPID-4937896", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-M5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-m5-94d5ec", "product": { "name": "vers:unknown/1.3.0-m5-94d5ec", "product_id": "CSAFPID-4937897", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-M5-94d5ec" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-rc1", "product": { "name": "vers:unknown/1.3.0-rc1", "product_id": "CSAFPID-4937898", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-rc2", "product": { "name": "vers:unknown/1.3.0-rc2", "product_id": "CSAFPID-4937899", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-rc3", "product": { "name": "vers:unknown/1.3.0-rc3", "product_id": "CSAFPID-4937900", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-rc4", "product": { "name": "vers:unknown/1.3.0-rc4", "product_id": "CSAFPID-4937901", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-RC4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0-rc5", "product": { "name": "vers:unknown/1.3.0-rc5", "product_id": "CSAFPID-4937902", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.0-RC5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.1", "product": { "name": "vers:unknown/1.3.1", "product_id": "CSAFPID-4937903", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.10", "product": { "name": "vers:unknown/1.3.10", "product_id": "CSAFPID-4937904", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.11", "product": { "name": "vers:unknown/1.3.11", "product_id": "CSAFPID-4937905", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.12", "product": { "name": "vers:unknown/1.3.12", "product_id": "CSAFPID-4937906", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.12" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.13", "product": { "name": "vers:unknown/1.3.13", "product_id": "CSAFPID-4937907", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.2", "product": { "name": "vers:unknown/1.3.2", "product_id": "CSAFPID-4937908", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.3", "product": { "name": "vers:unknown/1.3.3", "product_id": "CSAFPID-4937909", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.4", "product": { "name": "vers:unknown/1.3.4", "product_id": "CSAFPID-4937910", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.13@1.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.5", "product": { "name": "vers:unknown/1.3.5", "product_id": "CSAFPID-4937911", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.6", "product": { "name": "vers:unknown/1.3.6", "product_id": "CSAFPID-4937912", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.7", "product": { "name": "vers:unknown/1.3.7", "product_id": "CSAFPID-4937913", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.8", "product": { "name": "vers:unknown/1.3.8", "product_id": "CSAFPID-4937914", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.9", "product": { "name": "vers:unknown/1.3.9", "product_id": "CSAFPID-4937915", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.3.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0", "product": { "name": "vers:unknown/1.4.0", "product_id": "CSAFPID-4937916", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0-m1", "product": { "name": "vers:unknown/1.4.0-m1", "product_id": "CSAFPID-4937917", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.13@1.4.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0-m2", "product": { "name": "vers:unknown/1.4.0-m2", "product_id": "CSAFPID-4937918", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.13@1.4.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0-rc1", "product": { "name": "vers:unknown/1.4.0-rc1", "product_id": "CSAFPID-4937919", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0-rc2", "product": { "name": "vers:unknown/1.4.0-rc2", "product_id": "CSAFPID-4937920", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.1", "product": { "name": "vers:unknown/1.4.1", "product_id": "CSAFPID-4937921", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.2", "product": { "name": "vers:unknown/1.4.2", "product_id": "CSAFPID-4937922", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.3", "product": { "name": "vers:unknown/1.4.3", "product_id": "CSAFPID-4937923", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.4", "product": { "name": "vers:unknown/1.4.4", "product_id": "CSAFPID-4937924", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.5", "product": { "name": "vers:unknown/1.4.5", "product_id": "CSAFPID-4937925", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.6", "product": { "name": "vers:unknown/1.4.6", "product_id": "CSAFPID-4937926", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.7", "product": { "name": "vers:unknown/1.4.7", "product_id": "CSAFPID-4937927", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.8", "product": { "name": "vers:unknown/1.4.8", "product_id": "CSAFPID-4937928", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.9", "product": { "name": "vers:unknown/1.4.9", "product_id": "CSAFPID-4937929", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0", "product": { "name": "vers:unknown/1.5.0", "product_id": "CSAFPID-4937930", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0-m1", "product": { "name": "vers:unknown/1.5.0-m1", "product_id": "CSAFPID-4937931", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_2.13@1.5.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0-m2", "product": { "name": "vers:unknown/1.5.0-m2", "product_id": "CSAFPID-4937932", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0-rc1", "product": { "name": "vers:unknown/1.5.0-rc1", "product_id": "CSAFPID-4937933", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0-rc2", "product": { "name": "vers:unknown/1.5.0-rc2", "product_id": "CSAFPID-4937934", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.1", "product": { "name": "vers:unknown/1.5.1", "product_id": "CSAFPID-4937935", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.2", "product": { "name": "vers:unknown/1.5.2", "product_id": "CSAFPID-4937936", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.3", "product": { "name": "vers:unknown/1.5.3", "product_id": "CSAFPID-4937937", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.4", "product": { "name": "vers:unknown/1.5.4", "product_id": "CSAFPID-4937938", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.5", "product": { "name": "vers:unknown/1.5.5", "product_id": "CSAFPID-4937939", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.6", "product": { "name": "vers:unknown/1.5.6", "product_id": "CSAFPID-4937940", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.7", "product": { "name": "vers:unknown/1.5.7", "product_id": "CSAFPID-4937941", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.8", "product": { "name": "vers:unknown/1.5.8", "product_id": "CSAFPID-4937942", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.5.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0", "product": { "name": "vers:unknown/1.6.0", "product_id": "CSAFPID-4937943", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_3@1.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0-m1", "product": { "name": "vers:unknown/1.6.0-m1", "product_id": "CSAFPID-4937944", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.6.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0-rc1", "product": { "name": "vers:unknown/1.6.0-rc1", "product_id": "CSAFPID-4937945", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.6.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0-rc2", "product": { "name": "vers:unknown/1.6.0-rc2", "product_id": "CSAFPID-4937946", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.6.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.1", "product": { "name": "vers:unknown/1.6.1", "product_id": "CSAFPID-4937947", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.2", "product": { "name": "vers:unknown/1.6.2", "product_id": "CSAFPID-4937948", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0", "product": { "name": "vers:unknown/1.7.0", "product_id": "CSAFPID-4937949", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_3@1.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-m1", "product": { "name": "vers:unknown/1.7.0-m1", "product_id": "CSAFPID-4937950", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-m2", "product": { "name": "vers:unknown/1.7.0-m2", "product_id": "CSAFPID-4937951", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-M2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-m2-6810fix", "product": { "name": "vers:unknown/1.7.0-m2-6810fix", "product_id": "CSAFPID-4937952", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-M2-6810fix" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-m3", "product": { "name": "vers:unknown/1.7.0-m3", "product_id": "CSAFPID-4937953", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-M3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-rc1", "product": { "name": "vers:unknown/1.7.0-rc1", "product_id": "CSAFPID-4937954", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0-rc2", "product": { "name": "vers:unknown/1.7.0-rc2", "product_id": "CSAFPID-4937955", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1", "product": { "name": "vers:unknown/1.7.1", "product_id": "CSAFPID-4937956", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2", "product": { "name": "vers:unknown/1.7.2", "product_id": "CSAFPID-4937957", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3", "product": { "name": "vers:unknown/1.7.3", "product_id": "CSAFPID-4937958", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.7.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.0", "product": { "name": "vers:unknown/1.8.0", "product_id": "CSAFPID-4937959", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_3@1.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.0-rc1", "product": { "name": "vers:unknown/1.8.0-rc1", "product_id": "CSAFPID-4937960", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.8.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.1", "product": { "name": "vers:unknown/1.8.1", "product_id": "CSAFPID-4937961", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.2", "product": { "name": "vers:unknown/1.8.2", "product_id": "CSAFPID-4937962", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.3", "product": { "name": "vers:unknown/1.8.3", "product_id": "CSAFPID-4937963", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.8.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0", "product": { "name": "vers:unknown/1.9.0", "product_id": "CSAFPID-4937964", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_3@1.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0-m1", "product": { "name": "vers:unknown/1.9.0-m1", "product_id": "CSAFPID-4937965", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.0-M1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0-rc1", "product": { "name": "vers:unknown/1.9.0-rc1", "product_id": "CSAFPID-4937966", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.0-RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0-rc2", "product": { "name": "vers:unknown/1.9.0-rc2", "product_id": "CSAFPID-4937967", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.0-RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0-rc3", "product": { "name": "vers:unknown/1.9.0-rc3", "product_id": "CSAFPID-4937968", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.0-RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.1", "product": { "name": "vers:unknown/1.9.1", "product_id": "CSAFPID-4937969", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/io_3@1.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.2", "product": { "name": "vers:unknown/1.9.2", "product_id": "CSAFPID-4937970", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.3", "product": { "name": "vers:unknown/1.9.3", "product_id": "CSAFPID-4937971", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.4", "product": { "name": "vers:unknown/1.9.4", "product_id": "CSAFPID-4937972", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.5", "product": { "name": "vers:unknown/1.9.5", "product_id": "CSAFPID-4937973", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.6", "product": { "name": "vers:unknown/1.9.6", "product_id": "CSAFPID-4937974", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.7", "product": { "name": "vers:unknown/1.9.7", "product_id": "CSAFPID-5902547", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.8", "product": { "name": "vers:unknown/1.9.8", "product_id": "CSAFPID-5902548", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.9", "product": { "name": "vers:unknown/1.9.9", "product_id": "CSAFPID-5902549", "product_identification_helper": { "purl": "pkg:maven/org.scala-sbt/sbt@1.9.9" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0.9.5|<1.12.7", "product": { "name": "vers:unknown/>=0.9.5|<1.12.7", "product_id": "CSAFPID-5902550" } } ], "category": "product_name", "name": "sbt" } ], "category": "vendor", "name": "sbt" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0.9.5|<1.12.7", "product": { "name": "vers:unknown/>=0.9.5|<1.12.7", "product_id": "CSAFPID-5919260", "product_identification_helper": { "cpe": "cpe:2.3:a:scala.epfl:sbt:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "sbt" } ], "category": "vendor", "name": "scala.epfl" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-32948", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "### Summary\nOn Windows, sbt uses `Process(\"cmd\", \"/c\", ...)` to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to these commands without validation. Because `cmd /c` interprets `&`, `|`, and `;` as command separators, a malicious fragment can execute arbitrary commands.\n\n### Details\n- [Resolvers.scala L84–95](https://github.com/sbt/sbt/blob/dc90f160dfb563f46fd1a7b97945c381d15e2a6c/main/src/main/scala/sbt/Resolvers.scala#L84-L95) — git resolver passes `uri.getFragment()` to `run()` without sanitization\n- [Resolvers.scala L137–145](https://github.com/sbt/sbt/blob/dc90f160dfb563f46fd1a7b97945c381d15e2a6c/main/src/main/scala/sbt/Resolvers.scala#L137-L145) — `run()` uses `Process(\"cmd\", \"/c\", ...)` on Windows, so `cmd` interprets `&&` as command separator\n\n### PoC\n```sh\n# build.properties\n# sbt.version=1.12.5 # Tested on those two versions of sbt\nsbt.version=2.0.0-RC9\n```\n\n```scala\n// build.sbt\n\nThisBuild / scalaVersion := \"2.12.19\"\n\nlazy val root = project\n .in(file(\".\"))\n .dependsOn(vulnerable)\n\nlazy val vulnerable = RootProject(\n uri(\"https://github.com/sbt/io.git#develop%26%26calc.exe\")\n)\n```\n\n### Impact\n\nWindows users are impacted. An attacker can execute arbitrary Windows commands if they control the dependency URI.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-x4ff-q6h8-v7gw.json?alt=media" }, { "category": "description", "text": "sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process(\"cmd\", \"/c\", ...) to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to these commands without validation. Because cmd /c interprets &, |, and ; as command separators, a malicious fragment can execute arbitrary commands. This issue has been patched in version 1.12.7.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-32948" }, { "category": "description", "text": "sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process(\"cmd\", \"/c\", ...) to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to these commands without validation. Because cmd /c interprets &, |, and ; as command separators, a malicious fragment can execute arbitrary commands. This issue has been patched in version 1.12.7.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32948.json" }, { "category": "description", "text": "A flaw was found in sbt, a build tool for Scala and Java. On Windows, sbt uses the `cmd /c` command interpreter to execute version control system (VCS) commands. A remote attacker can exploit this by providing a specially crafted URI fragment (such as a branch, tag, or revision name) in the build definition. Because `cmd /c` interprets special characters as command separators, this lack of validation allows the attacker to inject and execute arbitrary commands on the system where sbt is running.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32948.json" }, { "category": "description", "text": "### Summary\nOn Windows, sbt uses `Process(\"cmd\", \"/c\", ...)` to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to these commands without validation. Because `cmd /c` interprets `&`, `|`, and `;` as command separators, a malicious fragment can execute arbitrary commands.\n\n### Patched version\n\nTechnically, sbt 1.12.7 is patched, but it has a bug that makes source dependency non-functional, so update to **sbt 1.12.8** or later instead.\n\n### Details\n- [Resolvers.scala L84–95](https://github.com/sbt/sbt/blob/dc90f160dfb563f46fd1a7b97945c381d15e2a6c/main/src/main/scala/sbt/Resolvers.scala#L84-L95) — git resolver passes `uri.getFragment()` to `run()` without sanitization\n- [Resolvers.scala L137–145](https://github.com/sbt/sbt/blob/dc90f160dfb563f46fd1a7b97945c381d15e2a6c/main/src/main/scala/sbt/Resolvers.scala#L137-L145) — `run()` uses `Process(\"cmd\", \"/c\", ...)` on Windows, so `cmd` interprets `&&` as command separator\n\n### PoC\n```sh\n# build.properties\n# sbt.version=1.12.5 # Tested on those two versions of sbt\nsbt.version=2.0.0-RC9\n```\n\n```scala\n// build.sbt\n\nThisBuild / scalaVersion := \"2.12.19\"\n\nlazy val root = project\n .in(file(\".\"))\n .dependsOn(vulnerable)\n\nlazy val vulnerable = RootProject(\n uri(\"https://github.com/sbt/io.git#develop%26%26calc.exe\")\n)\n```\n\n### Impact\n\nWindows users are impacted. An attacker can execute arbitrary Windows commands if they control the dependency URI.", "title": "github - https://api.github.com/advisories/GHSA-x4ff-q6h8-v7gw" }, { "category": "other", "text": "0.00027", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "6.7", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.7", "title": "NCSC Score" }, { "category": "other", "text": "There is exploit data available from source Nvd, The CVSS vector string contains A:H (Availability Impact: High), There is product_remediation data available from source Redhat, The value of the most recent EPSS score, Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 2\n", "title": "Vendor assessment" } ], "product_status": { "known_affected": [ "CSAFPID-4937850", "CSAFPID-4937851", "CSAFPID-4937852", "CSAFPID-4937853", "CSAFPID-4937854", "CSAFPID-4937855", "CSAFPID-4937856", "CSAFPID-4937857", "CSAFPID-4937858", "CSAFPID-4937859", "CSAFPID-4937860", "CSAFPID-4937861", "CSAFPID-4937862", "CSAFPID-4937863", "CSAFPID-4937864", "CSAFPID-4937865", "CSAFPID-4937866", "CSAFPID-4937867", "CSAFPID-4937868", "CSAFPID-4937869", "CSAFPID-4937870", "CSAFPID-4937871", "CSAFPID-4937872", "CSAFPID-4937873", "CSAFPID-4937874", "CSAFPID-4937875", "CSAFPID-4937876", "CSAFPID-4937877", "CSAFPID-4937878", "CSAFPID-4937879", "CSAFPID-4937880", "CSAFPID-4937881", "CSAFPID-4937882", "CSAFPID-4937883", "CSAFPID-4937884", "CSAFPID-4937885", "CSAFPID-4937886", "CSAFPID-4937887", "CSAFPID-4937888", "CSAFPID-4937889", "CSAFPID-4937890", "CSAFPID-4937891", "CSAFPID-4937892", "CSAFPID-4937893", "CSAFPID-4937894", "CSAFPID-4937895", "CSAFPID-4937896", "CSAFPID-4937897", "CSAFPID-4937898", "CSAFPID-4937899", "CSAFPID-4937900", "CSAFPID-4937901", "CSAFPID-4937902", "CSAFPID-4937903", "CSAFPID-4937904", "CSAFPID-4937905", "CSAFPID-4937906", "CSAFPID-4937907", "CSAFPID-4937908", "CSAFPID-4937909", "CSAFPID-4937910", "CSAFPID-4937911", "CSAFPID-4937912", "CSAFPID-4937913", "CSAFPID-4937914", "CSAFPID-4937915", "CSAFPID-4937916", "CSAFPID-4937917", "CSAFPID-4937918", "CSAFPID-4937919", "CSAFPID-4937920", "CSAFPID-4937921", "CSAFPID-4937922", "CSAFPID-4937923", "CSAFPID-4937924", "CSAFPID-4937925", "CSAFPID-4937926", "CSAFPID-4937927", "CSAFPID-4937928", "CSAFPID-4937929", "CSAFPID-4937930", "CSAFPID-4937931", "CSAFPID-4937932", "CSAFPID-4937933", "CSAFPID-4937934", "CSAFPID-4937935", "CSAFPID-4937936", "CSAFPID-4937937", "CSAFPID-4937938", "CSAFPID-4937939", "CSAFPID-4937940", "CSAFPID-4937941", "CSAFPID-4937942", "CSAFPID-4937943", "CSAFPID-4937944", "CSAFPID-4937945", "CSAFPID-4937946", "CSAFPID-4937947", "CSAFPID-4937948", "CSAFPID-4937949", "CSAFPID-4937950", "CSAFPID-4937951", "CSAFPID-4937952", "CSAFPID-4937953", "CSAFPID-4937954", "CSAFPID-4937955", "CSAFPID-4937956", "CSAFPID-4937957", "CSAFPID-4937958", "CSAFPID-4937959", "CSAFPID-4937960", "CSAFPID-4937961", "CSAFPID-4937962", "CSAFPID-4937963", "CSAFPID-4937964", "CSAFPID-4937965", "CSAFPID-4937966", "CSAFPID-4937967", "CSAFPID-4937968", "CSAFPID-4937969", "CSAFPID-4937970", "CSAFPID-4937971", "CSAFPID-4937972", "CSAFPID-4937973", "CSAFPID-4937974", "CSAFPID-5902512", "CSAFPID-5902513", "CSAFPID-5902514", "CSAFPID-5902515", "CSAFPID-5902516", "CSAFPID-5902517", "CSAFPID-5902518", "CSAFPID-5902519", "CSAFPID-5902520", "CSAFPID-5902521", "CSAFPID-5902522", "CSAFPID-5902523", "CSAFPID-5902524", "CSAFPID-5902525", "CSAFPID-5902526", "CSAFPID-5902527", "CSAFPID-5902528", "CSAFPID-5902529", "CSAFPID-5902530", "CSAFPID-5902531", "CSAFPID-5902532", "CSAFPID-5902533", "CSAFPID-5902534", "CSAFPID-5902535", "CSAFPID-5902536", "CSAFPID-5902537", "CSAFPID-5902538", "CSAFPID-5902539", "CSAFPID-5902540", "CSAFPID-5902541", "CSAFPID-5902542", "CSAFPID-5902543", "CSAFPID-5902544", "CSAFPID-5902545", "CSAFPID-5902546", "CSAFPID-5902547", "CSAFPID-5902548", "CSAFPID-5902549", "CSAFPID-5902550", "CSAFPID-5919260" ], "known_not_affected": [ "CSAFPID-1439300", "CSAFPID-1439302", "CSAFPID-1439304", "CSAFPID-5903710", "CSAFPID-5903711", "CSAFPID-5903712" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-x4ff-q6h8-v7gw.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-32948" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32948.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32948.json" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-x4ff-q6h8-v7gw" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/sbt/sbt/security/advisories/GHSA-x4ff-q6h8-v7gw" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/sbt/sbt/commit/1ce945b6b79cbe3cef6c0fe9efbbd2904e0f479e" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/sbt/sbt/commit/3a474ab060df4dbfa825a7e7bc97e00056519800" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/sbt/sbt/releases/tag/v1.12.7" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-32948" }, { "category": "external", "summary": "Reference - github; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32948" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-x4ff-q6h8-v7gw" } ], "remediations": [ { "category": "mitigation", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "CSAFPID-1439300", "CSAFPID-1439302", "CSAFPID-1439304", "CSAFPID-5903710", "CSAFPID-5903711", "CSAFPID-5903712" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-4937850", "CSAFPID-4937851", "CSAFPID-4937852", "CSAFPID-4937853", "CSAFPID-4937854", "CSAFPID-4937855", "CSAFPID-4937856", "CSAFPID-4937857", "CSAFPID-4937858", "CSAFPID-4937859", "CSAFPID-4937860", "CSAFPID-4937861", "CSAFPID-4937862", "CSAFPID-4937863", "CSAFPID-4937864", "CSAFPID-4937865", "CSAFPID-4937866", "CSAFPID-4937867", "CSAFPID-4937868", "CSAFPID-4937869", "CSAFPID-4937870", "CSAFPID-4937871", "CSAFPID-4937872", "CSAFPID-4937873", "CSAFPID-4937874", "CSAFPID-4937875", "CSAFPID-4937876", "CSAFPID-4937877", "CSAFPID-4937878", "CSAFPID-4937879", "CSAFPID-4937880", "CSAFPID-4937881", "CSAFPID-4937882", "CSAFPID-4937883", "CSAFPID-4937884", "CSAFPID-4937885", "CSAFPID-4937886", "CSAFPID-4937887", "CSAFPID-4937888", "CSAFPID-4937889", "CSAFPID-4937890", "CSAFPID-4937891", "CSAFPID-4937892", "CSAFPID-4937893", "CSAFPID-4937894", "CSAFPID-4937895", "CSAFPID-4937896", "CSAFPID-4937897", "CSAFPID-4937898", "CSAFPID-4937899", "CSAFPID-4937900", "CSAFPID-4937901", "CSAFPID-4937902", "CSAFPID-4937903", "CSAFPID-4937904", "CSAFPID-4937905", "CSAFPID-4937906", "CSAFPID-4937907", "CSAFPID-4937908", "CSAFPID-4937909", "CSAFPID-4937910", "CSAFPID-4937911", "CSAFPID-4937912", "CSAFPID-4937913", "CSAFPID-4937914", "CSAFPID-4937915", "CSAFPID-4937916", "CSAFPID-4937917", "CSAFPID-4937918", "CSAFPID-4937919", "CSAFPID-4937920", "CSAFPID-4937921", "CSAFPID-4937922", "CSAFPID-4937923", "CSAFPID-4937924", "CSAFPID-4937925", "CSAFPID-4937926", "CSAFPID-4937927", "CSAFPID-4937928", "CSAFPID-4937929", "CSAFPID-4937930", "CSAFPID-4937931", "CSAFPID-4937932", "CSAFPID-4937933", "CSAFPID-4937934", "CSAFPID-4937935", "CSAFPID-4937936", "CSAFPID-4937937", "CSAFPID-4937938", "CSAFPID-4937939", "CSAFPID-4937940", "CSAFPID-4937941", "CSAFPID-4937942", "CSAFPID-4937943", "CSAFPID-4937944", "CSAFPID-4937945", "CSAFPID-4937946", "CSAFPID-4937947", "CSAFPID-4937948", "CSAFPID-4937949", "CSAFPID-4937950", "CSAFPID-4937951", "CSAFPID-4937952", "CSAFPID-4937953", "CSAFPID-4937954", "CSAFPID-4937955", "CSAFPID-4937956", "CSAFPID-4937957", "CSAFPID-4937958", "CSAFPID-4937959", "CSAFPID-4937960", "CSAFPID-4937961", "CSAFPID-4937962", "CSAFPID-4937963", "CSAFPID-4937964", "CSAFPID-4937965", "CSAFPID-4937966", "CSAFPID-4937967", "CSAFPID-4937968", "CSAFPID-4937969", "CSAFPID-4937970", "CSAFPID-4937971", "CSAFPID-4937972", "CSAFPID-4937973", "CSAFPID-4937974", "CSAFPID-5902512", "CSAFPID-5902513", "CSAFPID-5902514", "CSAFPID-5902515", "CSAFPID-5902516", "CSAFPID-5902517", "CSAFPID-5902518", "CSAFPID-5902519", "CSAFPID-5902520", "CSAFPID-5902521", "CSAFPID-5902522", "CSAFPID-5902523", "CSAFPID-5902524", "CSAFPID-5902525", "CSAFPID-5902526", "CSAFPID-5902527", "CSAFPID-5902528", "CSAFPID-5902529", "CSAFPID-5902530", "CSAFPID-5902531", "CSAFPID-5902532", "CSAFPID-5902533", "CSAFPID-5902534", "CSAFPID-5902535", "CSAFPID-5902536", "CSAFPID-5902537", "CSAFPID-5902538", "CSAFPID-5902539", "CSAFPID-5902540", "CSAFPID-5902541", "CSAFPID-5902542", "CSAFPID-5902543", "CSAFPID-5902544", "CSAFPID-5902545", "CSAFPID-5902546", "CSAFPID-5902547", "CSAFPID-5902548", "CSAFPID-5902549", "CSAFPID-5902550", "CSAFPID-5919260" ] } ], "title": "CVE-2026-32948" } ] }