<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm" -->

---
title: Scala 3.8.4 is now available! | daily.dev
description: Scala 3.8.4 ships fixes from a security audit conducted with the Open Source Technology Improvement Fund and Quarkslab, including hardened TASTy parsing...
canonical: https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Scala 3.8.4 is now available! | daily.dev
og:description: Scala 3.8.4 ships fixes from a security audit conducted with the Open Source Technology Improvement Fund and Quarkslab, including hardened TASTy parsing...
og:url: https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm
og:image: https://api.daily.dev/og/posts/YFrWitzsm.png
og:image:alt: Scala 3.8.4 is now available!
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Scala 3.8.4 is now available!

**[The Scala Programming Language](https://daily.dev/sources/scala-lang)** · 3 min read · 0 upvotes · 0 comments

## Summary

Scala 3.8.4 ships fixes from a security audit conducted with the Open Source Technology Improvement Fund and Quarkslab, including hardened TASTy parsing against maliciously crafted files, a fix for a stored XSS vulnerability in Scaladoc, improved error handling in scala.sys.process.Parser.tokenize, and a corrected JAR-walking logic in TastyPrinter. The release also adds :help support for all compiler settings (not just a fixed subset) usable both from the command line and the REPL via :settings, and bundles Scala CLI 1.14.0, upgraded from 1.11.x, which brings support for .test.java files, an auto-IDE-setup toggle, Scala.js 1.21.0 support, deprecation of the Ammonite REPL, and GraalVM native-image packaging options.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.scala-lang.org/news/3.8.4>

## Questions this post answers

### What security fixes are included in Scala 3.8.4?

Scala 3.8.4 fixes several issues found during a security audit with the Open Source Technology Improvement Fund and Quarkslab. It hardens TASTy parsing to prevent infinite loops on maliciously crafted files, fixes a stored XSS vulnerability in Scaladoc, improves error handling in scala.sys.process.Parser.tokenize, and corrects TastyPrinter's JAR-walking logic to include subdirectories.

_Teams patching Scala toolchains for security issues can track releases like this one on daily.dev._

### How do I see documentation for a specific Scala compiler flag?

Append :help to any compiler setting to view its documentation, a feature introduced in Scala 3.8.4 that now works for all compiler options rather than a fixed subset. From the command line, run something like `scala test.scala -Xkind-projector:help`, or in the REPL use `:settings -Wunused:help` to get the same output.

_Developers exploring compiler flags can follow Scala tooling updates like this on daily.dev._

### What version of Scala CLI is bundled with Scala 3.8.4 and what changed?

Scala 3.8.4 bundles Scala CLI 1.14.0, upgraded from 1.11.x through 1.12.5 and 1.13.0. Notable additions include experimental --cross support for run/package/doc, Scala.js 1.21.0 support, deprecation of the Ammonite REPL, a java-test-runner for pure Java tests, GraalVM native-image packaging options, support for .test.java files, and a toggle to disable auto-IDE-setup.

_Anyone tracking Scala CLI changes before upgrading can follow tooling updates like this on daily.dev._

## Similar posts on daily.dev

- [Scala 3.9 LTS released\!](https://daily.dev/posts/scala-3-9-lts-released--qzsoaklif) · The Scala Programming Language · 0 upvotes · 0 comments
- [IntelliJ Scala Plugin 2025.3 Is Out\!](https://daily.dev/posts/intellij-scala-plugin-2025-3-is-out--pvmkuemfk) · JetBrains · 1 upvotes · 0 comments
- [Scala 3.8 Support in the Scala Plugin](https://daily.dev/posts/scala-3-8-support-in-the-scala-plugin-uwgqstmu3) · JetBrains · 0 upvotes · 0 comments
- [Scala Tutorials](https://daily.dev/posts/scala-tutorials-tbkbttscw) · Hacker News · 0 upvotes · 0 comments
- [Show HN: Scala Tutorials – interactive Scala 3 lessons in the browser](https://daily.dev/posts/show-hn-scala-tutorials-interactive-scala-3-lessons-in-the-browser-vj1j9s8dt) · Hacker News · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#compiler](https://daily.dev/tags/compiler), [#scala](https://daily.dev/tags/scala)

[View this post on daily.dev](https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Scala 3.8.4 is now available!","url":"https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm"},"datePublished":"2026-08-23T12:17:35.478Z","dateModified":"2026-08-23T12:25:34.831Z","description":"Scala 3.8.4 ships fixes from a security audit conducted with the Open Source Technology Improvement Fund and Quarkslab, including hardened TASTy parsing...","image":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","thumbnailUrl":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","isAccessibleForFree":true,"articleSection":"The Scala Programming Language","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Scala Programming Language","logo":"https://media.daily.dev/image/upload/s--4Bql-UcX--/f_auto,q_auto/v1787487426/logos/scala-lang?_a=BAMAMicg0","url":"https://daily.dev/sources/scala-lang"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,compiler,scala","timeRequired":"PT3M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Scala Programming Language","item":"https://daily.dev/sources/scala-lang"},{"@type":"ListItem","position":3,"name":"Scala 3.8.4 is now available!"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/scala-3-8-4-is-now-available--yfrwitzsm#faq","mainEntity":[{"@type":"Question","name":"What security fixes are included in Scala 3.8.4?","acceptedAnswer":{"@type":"Answer","text":"Scala 3.8.4 fixes several issues found during a security audit with the Open Source Technology Improvement Fund and Quarkslab. It hardens TASTy parsing to prevent infinite loops on maliciously crafted files, fixes a stored XSS vulnerability in Scaladoc, improves error handling in scala.sys.process.Parser.tokenize, and corrects TastyPrinter's JAR-walking logic to include subdirectories. Teams patching Scala toolchains for security issues can track releases like this one on daily.dev."}},{"@type":"Question","name":"How do I see documentation for a specific Scala compiler flag?","acceptedAnswer":{"@type":"Answer","text":"Append :help to any compiler setting to view its documentation, a feature introduced in Scala 3.8.4 that now works for all compiler options rather than a fixed subset. From the command line, run something like `scala test.scala -Xkind-projector:help`, or in the REPL use `:settings -Wunused:help` to get the same output. Developers exploring compiler flags can follow Scala tooling updates like this on daily.dev."}},{"@type":"Question","name":"What version of Scala CLI is bundled with Scala 3.8.4 and what changed?","acceptedAnswer":{"@type":"Answer","text":"Scala 3.8.4 bundles Scala CLI 1.14.0, upgraded from 1.11.x through 1.12.5 and 1.13.0. Notable additions include experimental --cross support for run/package/doc, Scala.js 1.21.0 support, deprecation of the Ammonite REPL, a java-test-runner for pure Java tests, GraalVM native-image packaging options, support for .test.java files, and a toggle to disable auto-IDE-setup. Anyone tracking Scala CLI changes before upgrading can follow tooling updates like this on daily.dev."}}]}
```