Vendor
Snyk
22 known vulnerabilities in products by Snyk, 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-75486 | Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name | 8.0 | |
| Critical | CVE-2019-10744 | Snyk Lodash: security vulnerability | 9.1 | |
| Critical | CVE-2019-10760 | Snyk Safer-eval: Code Execution | 9.9 | |
| Critical | CVE-2019-10791 | Snyk Promise-probe: Command Injection | 9.8 | |
| Critical | CVE-2019-10759 | Snyk Safer-eval: Code Execution | 9.9 | |
| Critical | CVE-2019-10781 | Snyk Schema-inspector: security vulnerability | 9.8 | |
| Medium | CVE-2022-22984 | Command Injection | 5.0 | |
| High | CVE-2019-3800 | CF CLI writes the client id and secret to config file | 6.3 | |
| Medium | CVE-2020-7649 | Directory Traversal | 4.9 | |
| Medium | CVE-2019-10797 | Snyk WSO2 transport-http: security vulnerability | 6.5 | |
| Medium | CVE-2019-10793 | Snyk Dot-object: security vulnerability | 6.3 | |
| Medium | CVE-2019-10795 | Snyk Undefsafe: security vulnerability | 6.3 | |
| Medium | CVE-2019-10792 | Snyk Bodymen: security vulnerability | 6.3 | |
| High | CVE-2022-40764 | Snyk Cli: security vulnerability | 7.8 | |
| High | CVE-2024-48964 | Snyk Cli: OS Command Injection | 7.5 | |
| Critical | CVE-2024-48963 | Snyk Cli: OS Command Injection | 7.5 | |
| High | CVE-2022-24441 | Code Injection | 5.8 | |
| Medium | CVE-2019-10794 | Snyk Component-flatten: security vulnerability | 6.3 | |
| Medium | CVE-2023-1065 | Snyk Kubernetes Monitor: Improper Authentication | 6.5 | |
| High | CVE-2024-21571 | Snyk Code Agent: Code Injection | 8.1 | |
| High | CVE-2025-6624 | Snyk: Insertion of Sensitive Information into Log File | 7.2 | |
| Medium | CVE-2023-1767 | Snyk Advisor: Cross-site Scripting | 4.3 |
Products
| Snyk Cli | 7 | 0 |