CyberSecBulletin

Synk vulnerabilities

We track 1 vulnerability in Synk products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 6, 2024.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Synk vulnerabilities

  • 8.1 High severity

    Code Agent: Improper Control of Generation of Code

    CVE-2024-21571Snyk

    Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have netw