Download Latest Version
sbt-2.0.7.msi (14.9 MB)
Get an email when there's a new version of sbt
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| sbt-1.12.15.zip.asc | 2026-08-07 | 833 Bytes | |
| sbt-1.12.15.zip.sha256 | 2026-08-07 | 82 Bytes | |
| sbt-1.12.15.tgz.asc | 2026-08-07 | 833 Bytes | |
| sbt-1.12.15.tgz.sha256 | 2026-08-07 | 82 Bytes | |
| sbt-1.12.15.zip | 2026-08-07 | 57.5 MB | |
| sbt-1.12.15.tgz | 2026-08-07 | 57.7 MB | |
| sbt-1.12.15.msi.asc | 2026-08-07 | 833 Bytes | |
| sbt-1.12.15.msi.sha256 | 2026-08-07 | 82 Bytes | |
| sbt-1.12.15.msi | 2026-08-07 | 14.9 MB | |
| 1.12.15 source code.tar.gz | 2026-08-07 | 5.0 MB | |
| 1.12.15 source code.zip | 2026-08-07 | 6.7 MB | |
| README.md | 2026-08-07 | 1.1 kB | |
| Totals: 12 Items | 141.8 MB | 2 | |
Remote code execution vulnerability fix
sbt team received a security report GHSA-m2pw-22cj-jq4v from @arpitjain099 that when the serverConnectionType is set to Tcp, an attacker is able to execute arbitrary code remotely via the sbt server. sbt 1.12.15 and 2.0.6 fix this bug.
We recommend removing the serverConnectionType setting, or upgrading to a patched version or later:
:::scala
Global / serverConnectionType := ConnectionType.Tcp
The remediation was implemented by @eed3si9n and @anatoliykmetyuk.
š bug fixes
- bport: Fixes sbt runner parsing
build.propertieswith whitespaces by @anatoliykmetyuk in https://github.com/sbt/sbt/pull/9374 - bport: Fixes sbt runner support on OpenBSD by @eed3si9n in https://github.com/sbt/sbt/pull/9394
behind the scenes
- Update to sbtn 2.0.0-731e6666
- ci: Bump actions/setup-python from 6 to 7 by @dependabot[bot] in https://github.com/sbt/sbt/pull/9478
Full Changelog: https://github.com/sbt/sbt/compare/v1.12.14...v1.12.15