Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package snyk, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (4)
CVE-2022-40764 — CVSS 7.8 (high): Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow…
CVE-2025-6624 — CVSS 7.2 (high): Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI…
CVE-2022-24441 — CVSS 5.8 (medium): The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a…
CVE-2022-22984 — CVSS 5.0 (medium): The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package…