Snyk Cli vulnerabilities
4 known vulnerabilities in Snyk Cli from Snyk. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
snyk: Insertion of Sensitive Information into Log File
Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when e
- 8.8 High severity
Snyk Cli: Improper Control of Generation of Code
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory na
- 9.8 Critical severity
Snyk Cli: Improper Neutralization of Special Elements used in an OS Command
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name.
- 8.8 High severity
snyk: Improper Neutralization of Special Elements used in an OS Command
The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed