Snyk

Products

Exploited and recent CVEs

• CVE-2026-75486 High 8.0 Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name 2.3%
• CVE-2024-21571 High 8.1 Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiti 0.2%
• CVE-2024-48963 High 7.5 The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to 0.5%
• CVE-2024-48963 High 7.5 The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to 0.5%
• CVE-2024-48964 High 7.5 The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due 0.5%
• CVE-2024-48964 High 7.5 The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due 0.5%
• CVE-2023-1767 Medium 4.3 The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its p 0.5%
• CVE-2023-1065 Medium 6.5 This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose 0.6%