Skip to content
OpenAdvisories

Package · npm

snyk

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.2
    CVE-2025-6624

    Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

    Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when …

    snyk github.com/snyk/go-application-framework npm Go
  • Medium 5.8
    CVE-2022-24441

    Code Injection

    The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed…

    snyk npm
  • Medium 5.0
    CVE-2022-22984

    Command Injection

    The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1…

    snyk snyk-gradle-plugin snyk-sbt-plugin @snyk/snyk-hex-plugin npm
  • High 7.8
    CVE-2022-40764

    Snyk CLI affected by Command Injection vulnerability

    Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstr…

    snyk snyk-go-plugin npm