Snyk vulnerabilities

CVEs per yearBy the year they were published

1. 20193
2. 20207
3. 20232
4. 20243
5. 20261

Newest CVEs

• CVE-2026-75486

  Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

  snyk · sweater-comb

  High8.5
• CVE-2024-21571

  Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code…

  Snyk · Code Agent

  High8.1
• CVE-2024-48963

  The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is…

  Snyk · Snyk Cli

  High7.5
• CVE-2024-48964

  The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test…

  Snyk · Snyk Cli

  High7.5
• CVE-2023-1767

  The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the…

  Snyk · Snyk Advisor

  Medium4.3
• CVE-2023-1065

  This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other,…

  Snyk · Snyk Kubernetes Monitor

  Medium6.5
• CVE-2019-10797

  Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

  Snyk · WSO2 transport-http

  Medium6.5
• CVE-2019-10791

  promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by…

  Snyk · promise-probe

  Critical9.8
• CVE-2019-10793

  dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a…

  Snyk · dot-object

  Medium6.3
• CVE-2019-10792

  bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using…

  Snyk · bodymen

  Medium6.3