Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: snyk 1.1064.0 Clear all filters
TI-2022-08313 CVE-2022-24441 · GHSA-4vrv-93c7-m92j

Code injection in snyk

Priority LOW 39

The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00791 Published 2022-11-30 Fixed in 1.1064.0 CWE-78
TI-2022-07159 CVE-2022-22984 · GHSA-4x6g-3cmx-w76r

Command injection in snyk

Priority MEDIUM 61

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2;…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.03225 Published 2022-11-30 Partial fix · 1.1064.0, 2.31.3 +6 CWE-78