Snyk vulnerabilities

Products

• Cli 5
• Safer-eval 3
• Bodymen 2
• Cli 2

Newest

• snyk sweater-comb Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name CVE-2026-75486 8.5 HighAugust 28, 2026
• snyk cli Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode CVE-2025-6624 Fix available 2.4 LowJune 26, 2025
• snyk code agent Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent.... CVE-2024-21571 8.1 HighDecember 6, 2024
• snyk cli, php plugin +1 more OS Command Injection in Snyk php plugin CVE-2024-48963 Fix available 7.5 HighOctober 23, 2024
• snyk cli, gradle plugin +1 more OS Command Injection in Snyk gradle plugin CVE-2024-48964 Fix available 7.5 HighOctober 23, 2024
• snyk advisor The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th... CVE-2023-1767 Public exploit 4.3 MediumApril 20, 2023
• snyk kubernetes monitor This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a... CVE-2023-1065 6.5 MediumFebruary 28, 2023
• snyk cli, language server, security +2 more Code Injection CVE-2022-24441 Fix available 5.8 MediumNovember 30, 2022
• snyk cli, cocoapods cli, docker cli +5 more +7 more Command Injection CVE-2022-22984 Fix available 5.0 MediumNovember 30, 2022
• snyk cli, golang cli +1 more Snyk CLI affected by Command Injection vulnerability CVE-2022-40764 Fix available 7.8 HighOctober 3, 2022
• snyk broker Directory Traversal CVE-2020-7649 Fix available 4.9 MediumJuly 25, 2022
• bodymen project bodymen Prototype Pollution CVE-2022-25296 6.3 MediumMarch 17, 2022
• snyk wso2 transport-http, wso2 transport-http +1 more HTTP Response Splitting in WSO2 transport-http CVE-2019-10797 Fix available 6.5 MediumFebruary 19, 2020
• promise-probe project promise-probe promise-probe OS command injection vulnerability CVE-2019-10791 Fix available 9.8 CriticalFebruary 18, 2020
• dot-object project dot-object Prototype Pollution in dot-object CVE-2019-10793 Fix available 6.3 MediumFebruary 18, 2020
• bodymen project bodymen Injection in bodymen CVE-2019-10792 Fix available 6.3 MediumFebruary 18, 2020
• snyk undefsafe Prototype Pollution in undefsafe CVE-2019-10795 Fix available 6.3 MediumFebruary 18, 2020
• component-flatten project component-flatten component-flatten vulnerable to Prototype Pollution CVE-2019-10794 6.3 MediumFebruary 18, 2020
• schema-inspector Validation Bypass in schema-inspector CVE-2019-10781 Fix available 9.8 CriticalJanuary 22, 2020
• safer-eval project safer-eval Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10769 9.8 CriticalDecember 6, 2019
• safer-eval project safer-eval Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10760 Public exploitFix available 9.9 CriticalOctober 15, 2019
• safer-eval project safer-eval Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10759 Fix available 9.9 CriticalOctober 15, 2019
• cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more CF CLI writes the client id and secret to config file CVE-2019-3800 6.3 MediumAugust 5, 2019
• lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 more Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019