Skip to content
OpenAdvisories

Vendor

snyk

16 known vulnerabilities.

Products

Snyk Cli 2 safer-eval 2 Code Agent 1 Snyk Gradle Plugin 1 Snyk PHP Plugin 1 Snyk Kubernetes Monitor 1 component-flatten 1 sweater-comb 1 schema-inspector 1 dot-object 1 Snyk Advisor 1 WSO2 transport-http 1 lodash 1 promise-probe 1 bodymen 1 undefsafe 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-1767 Public exploit

    The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature …

    snyk Snyk Advisor
  • Critical 9.9
    CVE-2019-10760 Public exploit

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.

    snyk safer-eval safer-eval npm
  • Critical 9.1
    CVE-2019-10744 Public exploit

    Prototype Pollution in lodash

    Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

    snyk lodash js-jquery node-lodash Debian Azure Linux npm RubyGems