Every CVE whose affected-product data names Snyk Snyk Cli, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2024-48963 — CVSS 7.5 (high): The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be…
CVE-2024-48964 — CVSS 7.5 (high): The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be…
CVE-2025-6624 — CVSS 7.2 (high): Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI…
CVE-2022-24441 — CVSS 5.8 (medium): The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a…
CVE-2022-22984 — CVSS 5.0 (medium): The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package…