Skip to content
OpenAdvisories

Vendor

snyk

16 known vulnerabilities.

Products

Snyk Cli 2 safer-eval 2 Code Agent 1 Snyk Gradle Plugin 1 Snyk PHP Plugin 1 Snyk Kubernetes Monitor 1 component-flatten 1 sweater-comb 1 schema-inspector 1 dot-object 1 Snyk Advisor 1 WSO2 transport-http 1 lodash 1 promise-probe 1 bodymen 1 undefsafe 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-1767 Public exploit

    The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature …

    snyk Snyk Advisor
  • Medium 6.5
    CVE-2023-1065

    This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, wh…

    snyk Snyk Kubernetes Monitor
  • Medium 6.5
    CVE-2019-10797

    HTTP Response Splitting in WSO2 transport-http

    Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

    snyk WSO2 transport-http org.wso2.transport.http:org.wso2.transport.http.netty Maven
  • Medium 6.3
    CVE-2019-10793

    Prototype Pollution in dot-object

    dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

    snyk dot-object dot-object npm
  • Medium 6.3
    CVE-2019-10792

    Injection in bodymen

    bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

    snyk bodymen bodymen npm
  • Medium 6.3
    CVE-2019-10795

    Prototype Pollution in undefsafe

    undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

    snyk undefsafe nodejs-nodemon undefsafe Azure Linux npm
  • Medium 6.3
    CVE-2019-10794

    component-flatten vulnerable to Prototype Pollution

    All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

    snyk component-flatten component-flatten npm