Snyk Cli vulnerabilities

1 known vulnerability affecting snyk/cli.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-40764HIGHCVSS 7.8fixed in 1.996.02022-10-03

CVE-2022-40764 [HIGH] CWE-78 CVE-2022-40764: Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin be