Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

GSA_kwCzR0hTQS00eDZnLTNjbXgtdzc2cs4AAwGD

Moderate EPSS: 0.01414% (0.79508 Percentile) EPSS:
Permalink JSON

Snyk plugins vulnerable to Command Injection

Affected Packages Affected Versions Fixed Versions
npm:@snyk/snyk-cocoapods-plugin < 2.5.3 2.5.3
4 Dependent packages
4,335 Dependent repositories
154,841 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.0.1, 1.0.2, 1.0.3, 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.5.0, 2.5.1, 2.5.2

All unaffected versions

2.5.3, 2.6.0, 3.0.0
npm:snyk-docker-plugin < 5.6.5 5.6.5
3 Dependent packages
6,348 Dependent repositories
180,055 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.1.0, 1.2.0, 1.4.0, 1.4.1, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.8.1, 1.9.0, 1.9.1, 1.9.2, 1.10.0, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.11.0, 1.12.0, 1.12.1, 1.12.2, 1.12.3, 1.13.0, 1.13.1, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.18.0, 1.18.1, 1.19.0, 1.19.1, 1.19.2, 1.20.0, 1.21.0, 1.21.1, 1.21.2, 1.21.3, 1.22.0, 1.22.1, 1.23.0, 1.24.0, 1.24.1, 1.24.2, 1.25.0, 1.25.1, 1.26.0, 1.27.0, 1.28.0, 1.29.0, 1.29.1, 1.30.0, 1.30.1, 1.30.2, 1.31.0, 1.31.1, 1.31.2, 1.32.0, 1.32.1, 1.33.0, 1.33.1, 1.34.0, 1.34.1, 1.35.0, 1.36.0, 1.36.1, 1.37.0, 1.37.1, 1.37.2, 1.37.3, 1.38.0, 2.0.0, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.3.0, 2.4.0, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, 2.8.0, 2.8.1, 2.9.0, 2.9.1, 2.9.2, 2.9.3, 2.10.0, 3.0.0, 3.1.0, 3.1.1, 3.2.0, 3.3.0, 3.4.0, 3.4.1, 3.4.2, 3.5.0, 3.5.1, 3.5.2, 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0, 3.7.1, 3.8.0, 3.9.0, 3.10.0, 3.11.0, 3.12.0, 3.12.1, 3.12.2, 3.12.3, 3.13.0, 3.13.1, 3.14.0, 3.15.0, 3.16.0, 3.17.0, 3.17.1, 3.18.0, 3.18.1, 3.18.2, 3.19.0, 3.20.0, 3.21.0, 3.22.0, 3.23.0, 3.24.0, 3.25.0, 3.26.0, 3.26.1, 3.26.2, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.5.1, 4.6.0, 4.6.1, 4.6.2, 4.6.3, 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.8.0, 4.9.0, 4.10.0, 4.11.0, 4.12.0, 4.13.0, 4.13.1, 4.14.0, 4.15.0, 4.15.1, 4.15.2, 4.16.0, 4.16.1, 4.17.0, 4.17.1, 4.17.2, 4.17.3, 4.18.0, 4.18.1, 4.19.0, 4.19.1, 4.19.2, 4.19.3, 4.19.4, 4.19.5, 4.19.6, 4.19.7, 4.19.8, 4.20.0, 4.20.1, 4.20.2, 4.20.3, 4.20.4, 4.20.5, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.20.10, 4.21.0, 4.21.1, 4.21.2, 4.21.3, 4.21.4, 4.22.0, 4.22.1, 4.22.2, 4.23.0, 4.24.0, 4.25.0, 4.25.1, 4.25.2, 4.26.0, 4.26.1, 4.27.0, 4.27.1, 4.28.0, 4.28.1, 4.29.0, 4.30.0, 4.31.0, 4.32.0, 4.32.1, 4.32.2, 4.32.3, 4.33.0, 4.33.1, 4.33.2, 4.34.0, 4.34.1, 4.34.2, 4.34.3, 4.34.4, 4.34.5, 4.35.1, 4.35.2, 4.36.0, 4.36.1, 4.37.0, 4.37.1, 4.38.0, 5.0.0, 5.0.1, 5.0.2, 5.1.0, 5.1.1, 5.1.2, 5.2.0, 5.2.1, 5.3.0, 5.3.1, 5.3.2, 5.4.0, 5.4.1, 5.4.2, 5.4.3, 5.5.0, 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4

All unaffected versions

5.6.5, 5.7.0, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.4.0, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.5.11, 6.6.0, 6.6.1, 6.7.0, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.5, 6.7.6, 6.7.7, 6.7.8, 6.7.9, 6.7.10, 6.8.0, 6.8.1, 6.8.2, 6.8.3, 6.9.0, 6.10.0, 6.10.1, 6.10.2, 6.10.3, 6.10.4, 6.10.5, 6.10.6, 6.11.0, 6.11.1, 6.11.2, 6.12.0, 6.12.1, 6.12.2, 6.12.3, 6.12.4, 6.13.0, 6.13.1, 6.13.2, 6.13.3, 6.13.4, 6.13.5, 6.13.6, 6.13.7, 6.13.8, 6.13.9, 6.13.10, 6.13.11, 6.13.12, 6.13.13, 6.13.14, 6.13.15, 6.13.16, 6.13.17, 6.13.18, 6.14.0, 6.15.0, 6.15.1, 6.15.2, 6.16.0, 6.17.0, 6.17.1, 6.18.0, 6.18.1, 6.18.2, 6.18.3, 7.0.0, 7.0.1, 7.1.0, 8.0.0, 8.0.1, 8.1.0, 8.2.0, 8.3.0, 8.3.1, 8.4.0, 8.4.1, 8.4.2
npm:snyk-gradle-plugin < 3.24.5 3.24.5
3 Dependent packages
6,724 Dependent repositories
205,884 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.2.0, 1.3.0, 1.3.1, 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.2.0, 2.2.1, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.7.0, 2.7.1, 2.8.0, 2.9.0, 2.10.0, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.11.0, 2.11.1, 2.11.2, 2.12.0, 2.12.1, 2.12.2, 2.12.3, 2.12.4, 2.12.5, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.3.0, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.4.0, 3.5.0, 3.5.1, 3.5.2, 3.6.2, 3.6.3, 3.7.0, 3.8.0, 3.9.0, 3.10.0, 3.10.1, 3.10.2, 3.10.3, 3.11.0, 3.12.0, 3.12.1, 3.12.2, 3.12.3, 3.12.4, 3.12.5, 3.13.0, 3.13.1, 3.13.2, 3.14.0, 3.14.1, 3.14.2, 3.14.3, 3.14.4, 3.14.5, 3.15.0, 3.16.0, 3.16.1, 3.16.2, 3.17.0, 3.18.0, 3.18.1, 3.18.2, 3.18.3, 3.19.0, 3.20.0, 3.20.1, 3.20.2, 3.21.0, 3.21.1, 3.22.0, 3.22.1, 3.22.2, 3.23.0, 3.23.1, 3.23.2, 3.24.0, 3.24.1, 3.24.2, 3.24.3, 3.24.4

All unaffected versions

3.24.5, 3.24.6, 3.25.0, 3.25.1, 3.25.2, 3.26.0, 3.26.1, 3.26.2, 3.26.3, 3.26.4, 3.27.0, 4.0.0, 4.0.1, 4.0.2, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, 4.9.0, 4.9.1, 4.9.2, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4
npm:@snyk/snyk-hex-plugin < 1.1.6 1.1.6
4 Dependent packages
631 Dependent repositories
52,429 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5

All unaffected versions

1.1.6, 2.0.0
npm:snyk-python-plugin < 1.24.2 1.24.2
3 Dependent packages
6,734 Dependent repositories
212,523 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.1.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3.0, 1.4.0, 1.4.1, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.6.0, 1.6.1, 1.7.0, 1.8.0, 1.8.1, 1.8.2, 1.9.0, 1.9.1, 1.9.2, 1.10.0, 1.10.1, 1.10.2, 1.11.0, 1.12.0, 1.12.1, 1.13.0, 1.13.1, 1.13.2, 1.13.3, 1.13.4, 1.14.0, 1.14.1, 1.15.0, 1.15.1, 1.16.0, 1.16.1, 1.17.0, 1.17.1, 1.17.2, 1.18.0, 1.19.0, 1.19.1, 1.19.2, 1.19.3, 1.19.4, 1.19.5, 1.19.6, 1.19.7, 1.19.8, 1.19.9, 1.19.10, 1.19.11, 1.20.0, 1.20.1, 1.21.0, 1.21.1, 1.22.0, 1.22.1, 1.22.2, 1.22.3, 1.23.0, 1.23.1, 1.23.2, 1.24.0, 1.24.1

All unaffected versions

1.24.2, 1.24.3, 1.24.4, 1.25.0, 1.25.1, 1.25.2, 1.25.3, 1.26.0, 1.26.1, 1.26.2, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.7.0, 2.7.1, 3.0.0
npm:snyk-sbt-plugin < 2.16.2 2.16.2
3 Dependent packages
6,721 Dependent repositories
201,489 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3.0, 1.3.1, 1.3.2, 2.0.0, 2.0.1, 2.1.0, 2.2.0, 2.2.1, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.4.0, 2.4.1, 2.4.2, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.6.0, 2.6.1, 2.7.0, 2.8.0, 2.9.0, 2.9.1, 2.9.2, 2.10.0, 2.11.0, 2.11.1, 2.11.2, 2.11.3, 2.11.4, 2.12.0, 2.13.0, 2.14.0, 2.15.0, 2.15.1, 2.16.0, 2.16.1

All unaffected versions

2.16.2, 2.16.3, 2.17.0, 2.17.1, 2.18.0, 2.18.1, 2.19.0, 3.0.0
npm:snyk-mvn-plugin < 2.31.3 2.31.3
3 Dependent packages
6,723 Dependent repositories
214,267 Downloads last month

Affected Version Ranges

All affected versions

1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.1.0, 1.1.1, 1.2.0, 1.2.1, 1.2.2, 2.0.0, 2.0.1, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.4.0, 2.5.0, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, 2.8.0, 2.9.0, 2.9.1, 2.9.2, 2.10.0, 2.10.1, 2.11.0, 2.12.0, 2.13.0, 2.14.0, 2.15.0, 2.15.1, 2.15.2, 2.16.0, 2.17.0, 2.17.1, 2.17.2, 2.17.3, 2.18.0, 2.18.1, 2.18.2, 2.19.0, 2.19.1, 2.19.3, 2.19.4, 2.20.0, 2.21.0, 2.21.1, 2.22.0, 2.23.0, 2.23.1, 2.23.2, 2.23.3, 2.23.4, 2.24.0, 2.25.0, 2.25.1, 2.25.2, 2.25.3, 2.26.0, 2.26.1, 2.26.2, 2.26.3, 2.26.4, 2.27.0, 2.28.0, 2.28.1, 2.28.2, 2.28.3, 2.29.0, 2.29.1, 2.29.2, 2.29.3, 2.29.4, 2.29.5, 2.29.6, 2.29.7, 2.30.0, 2.31.0, 2.31.1, 2.31.2

All unaffected versions

2.31.3, 2.32.0, 2.32.2, 2.32.3, 2.33.0, 2.34.0, 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.1.2, 3.2.0, 3.2.1, 3.3.0, 3.3.1, 3.4.0, 3.4.1, 3.4.2, 3.5.0, 3.6.0, 3.6.1, 3.7.0, 3.8.0, 3.8.1, 3.8.2, 3.8.3, 3.9.0, 3.9.1, 4.0.0, 4.0.1, 4.1.0
npm:snyk < 1.1064.0 1.1064.0
1,913 Dependent packages
10,449 Dependent repositories
2,250,007 Downloads last month

Affected Version Ranges

All affected versions

0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.1.0, 0.1.1, 0.2.0, 0.3.0, 0.3.1, 0.3.2, 0.4.0, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.6.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0, 1.3.0, 1.3.1, 1.4.0, 1.5.0, 1.5.1, 1.6.0, 1.6.1, 1.7.0, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.10.0, 1.11.0, 1.11.1, 1.11.2, 1.11.3, 1.12.0, 1.12.1, 1.13.0, 1.13.1, 1.13.2, 1.13.3, 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.15.0, 1.15.1, 1.15.2, 1.16.0, 1.16.1, 1.17.0, 1.17.1, 1.17.2, 1.17.3, 1.17.4, 1.17.5, 1.18.0, 1.18.1, 1.19.1, 1.20.0, 1.21.1, 1.21.2, 1.22.0, 1.22.1, 1.23.0, 1.23.1, 1.23.2, 1.23.3, 1.23.4, 1.24.0, 1.24.1, 1.24.2, 1.24.3, 1.24.4, 1.24.5, 1.24.6, 1.25.0, 1.25.1, 1.25.2, 1.26.0, 1.26.1, 1.27.0, 1.27.1, 1.28.0, 1.28.1, 1.29.0, 1.30.0, 1.30.1, 1.30.2, 1.31.0, 1.31.1, 1.32.0, 1.33.0, 1.33.1, 1.34.0, 1.34.1, 1.34.2, 1.34.3, 1.34.4, 1.35.0, 1.36.0, 1.36.1, 1.36.2, 1.37.0, 1.38.0, 1.38.1, 1.38.2, 1.38.3, 1.39.0, 1.39.1, 1.40.0, 1.40.1, 1.40.2, 1.40.3, 1.40.4, 1.41.0, 1.41.1, 1.42.0, 1.42.1, 1.42.2, 1.42.3, 1.42.4, 1.42.5, 1.42.6, 1.42.7, 1.43.0, 1.44.0, 1.44.1, 1.45.0, 1.46.0, 1.47.0, 1.48.0, 1.48.1, 1.49.0, 1.49.1, 1.49.2, 1.49.3, 1.49.4, 1.49.5, 1.50.0, 1.51.0, 1.52.0, 1.52.1, 1.53.0, 1.54.0, 1.54.1, 1.55.0, 1.55.1, 1.56.0, 1.57.0, 1.58.0, 1.59.0, 1.59.1, 1.60.0, 1.61.0, 1.61.1, 1.61.2, 1.62.0, 1.62.1, 1.62.2, 1.63.0, 1.64.0, 1.65.0, 1.65.1, 1.65.2, 1.65.3, 1.66.0, 1.67.0, 1.68.0, 1.68.1, 1.69.0, 1.69.1, 1.69.2, 1.69.3, 1.69.4, 1.69.5, 1.69.6, 1.69.7, 1.69.8, 1.69.9, 1.69.10, 1.69.11, 1.70.0, 1.70.1, 1.70.2, 1.70.3, 1.71.0, 1.71.1, 1.71.2, 1.72.0, 1.73.0, 1.74.0, 1.75.0, 1.76.0, 1.77.0, 1.78.0, 1.78.1, 1.79.0, 1.80.0, 1.80.1, 1.82.0, 1.82.1, 1.82.2, 1.83.0, 1.84.0, 1.85.0, 1.86.0, 1.87.0, 1.88.0, 1.88.1, 1.88.2, 1.88.3, 1.88.4, 1.89.0, 1.89.1, 1.90.0, 1.90.1, 1.90.2, 1.91.0, 1.92.0, 1.92.1, 1.92.2, 1.92.3, 1.92.4, 1.92.5, 1.92.6, 1.92.7, 1.93.0, 1.94.0, 1.95.0, 1.95.1, 1.95.2, 1.95.3, 1.96.0, 1.97.0, 1.97.1, 1.98.0, 1.99.0, 1.99.1, 1.100.0, 1.100.1, 1.100.2, 1.101.0, 1.101.1, 1.102.0, 1.103.0, 1.103.1, 1.103.2, 1.103.3, 1.103.4, 1.104.0, 1.104.1, 1.104.2, 1.105.0, 1.105.1, 1.106.0, 1.106.1, 1.107.0, 1.107.1, 1.108.0, 1.108.1, 1.108.2, 1.108.3, 1.109.0, 1.110.0, 1.110.1, 1.110.2, 1.111.0, 1.111.1, 1.112.0, 1.113.0, 1.114.0, 1.114.1, 1.115.0, 1.116.0, 1.116.1, 1.116.2, 1.116.3, 1.116.4, 1.117.0, 1.117.1, 1.117.2, 1.118.0, 1.118.1, 1.118.2, 1.119.0, 1.120.0, 1.120.1, 1.121.0, 1.121.1, 1.122.0, 1.122.1, 1.122.2, 1.122.3, 1.122.4, 1.123.0, 1.124.0, 1.124.1, 1.125.0, 1.126.0, 1.127.0, 1.128.0, 1.129.0, 1.130.0, 1.131.0, 1.132.0, 1.132.1, 1.132.2, 1.133.0, 1.134.0, 1.134.1, 1.134.2, 1.135.0, 1.135.1, 1.136.0, 1.136.1, 1.136.2, 1.136.3, 1.137.0, 1.138.0, 1.139.0, 1.140.0, 1.141.0, 1.142.0, 1.143.0, 1.143.1, 1.143.2, 1.143.3, 1.143.4, 1.143.5, 1.143.6, 1.144.0, 1.145.0, 1.146.0, 1.147.0, 1.147.1, 1.147.2, 1.147.3, 1.147.4, 1.148.0, 1.149.0, 1.150.0, 1.150.1, 1.151.0, 1.151.1, 1.151.2, 1.152.0, 1.153.0, 1.154.0, 1.154.1, 1.155.0, 1.156.0, 1.157.0, 1.157.1, 1.157.2, 1.158.0, 1.159.0, 1.160.0, 1.161.0, 1.161.1, 1.161.2, 1.162.0, 1.162.1, 1.162.2, 1.163.0, 1.163.1, 1.163.2, 1.163.3, 1.164.0, 1.165.0, 1.165.1, 1.165.2, 1.166.0, 1.166.1, 1.167.0, 1.167.1, 1.167.2, 1.168.0, 1.169.0, 1.169.1, 1.169.2, 1.170.0, 1.171.0, 1.171.1, 1.172.0, 1.173.0, 1.173.1, 1.173.2, 1.174.0, 1.174.1, 1.174.2, 1.175.0, 1.175.1, 1.175.2, 1.175.3, 1.175.4, 1.176.0, 1.177.0, 1.177.1, 1.178.0, 1.178.1, 1.179.0, 1.179.1, 1.180.0, 1.180.1, 1.180.2, 1.181.0, 1.182.0, 1.183.0, 1.184.0, 1.185.0, 1.185.1, 1.185.2, 1.185.3, 1.185.4, 1.185.5, 1.185.6, 1.186.0, 1.187.0, 1.187.1, 1.188.0, 1.189.0, 1.190.0, 1.191.0, 1.192.0, 1.192.1, 1.192.2, 1.192.3, 1.192.4, 1.192.5, 1.192.6, 1.193.0, 1.193.1, 1.193.2, 1.193.3, 1.194.0, 1.195.0, 1.195.1, 1.196.0, 1.197.0, 1.198.0, 1.199.0, 1.199.1, 1.199.2, 1.200.0, 1.200.1, 1.201.0, 1.202.0, 1.203.0, 1.204.0, 1.205.0, 1.206.0, 1.207.0, 1.207.1, 1.207.2, 1.208.0, 1.209.0, 1.210.0, 1.211.0, 1.212.0, 1.213.0, 1.214.0, 1.215.0, 1.216.0, 1.216.1, 1.216.2, 1.216.3, 1.216.4, 1.216.5, 1.217.0, 1.217.1, 1.217.2, 1.217.3, 1.218.0, 1.219.0, 1.220.0, 1.221.0, 1.221.1, 1.222.0, 1.222.1, 1.223.0, 1.224.0, 1.225.0, 1.226.0, 1.226.1, 1.226.2, 1.227.0, 1.228.0, 1.228.1, 1.228.2, 1.228.3, 1.228.4, 1.228.5, 1.228.6, 1.229.0, 1.230.0, 1.230.1, 1.230.2, 1.230.3, 1.230.4, 1.230.5, 1.230.6, 1.230.7, 1.230.8, 1.231.0, 1.231.1, 1.232.0, 1.233.0, 1.234.0, 1.234.1, 1.234.2, 1.235.0, 1.235.1, 1.236.0, 1.236.1, 1.236.2, 1.237.0, 1.237.1, 1.238.0, 1.239.0, 1.239.1, 1.239.2, 1.239.3, 1.239.4, 1.239.5, 1.240.0, 1.240.1, 1.240.2, 1.240.3, 1.241.0, 1.241.1, 1.242.0, 1.242.1, 1.242.2, 1.242.3, 1.243.0, 1.244.0, 1.245.0, 1.246.0, 1.247.0, 1.247.1, 1.248.0, 1.249.0, 1.249.1, 1.250.0, 1.251.0, 1.251.1, 1.251.2, 1.252.0, 1.253.0, 1.254.0, 1.255.0, 1.256.0, 1.257.0, 1.258.0, 1.258.1, 1.258.2, 1.259.0, 1.260.0, 1.261.0, 1.261.1, 1.262.0, 1.262.1, 1.262.2, 1.263.0, 1.263.1, 1.264.0, 1.265.0, 1.266.0, 1.267.0, 1.268.0, 1.269.0, 1.270.0, 1.271.0, 1.272.0, 1.273.0, 1.274.0, 1.274.1, 1.275.0, 1.276.0, 1.277.0, 1.277.1, 1.277.2, 1.277.3, 1.278.0, 1.278.1, 1.278.2, 1.279.0, 1.279.1, 1.279.2, 1.280.0, 1.280.1, 1.281.0, 1.281.1, 1.282.0, 1.283.0, 1.284.0, 1.284.1, 1.284.2, 1.285.0, 1.286.0, 1.286.1, 1.287.0, 1.288.0, 1.289.0, 1.289.1, 1.290.0, 1.290.1, 1.290.2, 1.291.0, 1.292.0, 1.293.0, 1.294.0, 1.294.1, 1.295.0, 1.295.1, 1.296.0, 1.296.1, 1.297.0, 1.297.1, 1.297.2, 1.297.3, 1.297.4, 1.298.0, 1.298.1, 1.299.0, 1.300.0, 1.301.0, 1.302.0, 1.303.0, 1.303.1, 1.303.2, 1.304.0, 1.305.0, 1.305.1, 1.306.0, 1.307.0, 1.308.0, 1.309.0, 1.310.0, 1.310.1, 1.311.0, 1.312.0, 1.313.0, 1.313.1, 1.314.0, 1.315.0, 1.315.1, 1.316.0, 1.316.1, 1.316.2, 1.317.0, 1.318.0, 1.319.0, 1.319.1, 1.319.2, 1.320.0, 1.320.1, 1.320.2, 1.320.3, 1.320.4, 1.320.5, 1.321.0, 1.322.0, 1.323.0, 1.323.1, 1.323.2, 1.324.0, 1.325.0, 1.326.0, 1.327.0, 1.327.1, 1.328.0, 1.329.0, 1.330.0, 1.330.1, 1.330.2, 1.330.3, 1.330.4, 1.331.0, 1.332.0, 1.332.1, 1.333.0, 1.334.0, 1.335.0, 1.336.0, 1.337.0, 1.338.0, 1.339.0, 1.339.1, 1.339.2, 1.339.3, 1.339.4, 1.340.0, 1.341.0, 1.341.1, 1.341.2, 1.342.0, 1.342.1, 1.342.2, 1.342.3, 1.343.0, 1.344.0, 1.345.0, 1.345.1, 1.346.0, 1.347.0, 1.347.1, 1.348.0, 1.348.1, 1.348.2, 1.349.0, 1.350.0, 1.350.1, 1.351.0, 1.352.0, 1.352.1, 1.353.0, 1.353.1, 1.354.0, 1.355.0, 1.356.0, 1.357.0, 1.358.0, 1.359.0, 1.359.1, 1.360.0, 1.361.0, 1.361.1, 1.361.2, 1.361.3, 1.362.0, 1.362.1, 1.363.0, 1.364.0, 1.364.1, 1.364.2, 1.365.0, 1.366.0, 1.366.1, 1.366.2, 1.367.0, 1.368.0, 1.368.1, 1.369.0, 1.369.1, 1.369.2, 1.369.3, 1.370.0, 1.370.1, 1.371.0, 1.371.1, 1.372.0, 1.373.0, 1.373.1, 1.374.0, 1.375.0, 1.376.0, 1.377.0, 1.377.1, 1.377.2, 1.378.0, 1.379.0, 1.379.1, 1.379.2, 1.380.0, 1.381.0, 1.381.1, 1.381.2, 1.382.0, 1.382.1, 1.383.0, 1.383.1, 1.384.0, 1.385.0, 1.385.1, 1.385.2, 1.386.0, 1.387.0, 1.387.1, 1.388.0, 1.389.0, 1.390.0, 1.391.0, 1.391.1, 1.392.0, 1.392.1, 1.393.0, 1.393.1, 1.394.0, 1.395.0, 1.396.0, 1.397.0, 1.397.1, 1.398.0, 1.398.1, 1.399.0, 1.399.1, 1.400.0, 1.401.0, 1.402.0, 1.403.0, 1.404.0, 1.405.0, 1.405.1, 1.406.0, 1.407.0, 1.408.0, 1.409.0, 1.409.1, 1.410.0, 1.410.1, 1.410.2, 1.410.3, 1.410.4, 1.411.0, 1.412.0, 1.413.0, 1.413.1, 1.413.2, 1.413.3, 1.413.4, 1.413.5, 1.414.0, 1.414.1, 1.415.0, 1.416.0, 1.417.0, 1.418.0, 1.419.0, 1.419.1, 1.420.0, 1.420.1, 1.420.2, 1.421.0, 1.421.1, 1.422.0, 1.422.1, 1.423.0, 1.424.0, 1.424.1, 1.424.2, 1.424.3, 1.424.4, 1.425.0, 1.425.1, 1.425.2, 1.425.3, 1.425.4, 1.426.0, 1.427.0, 1.427.1, 1.427.2, 1.428.0, 1.428.1, 1.428.2, 1.429.0, 1.430.0, 1.430.1, 1.430.2, 1.431.0, 1.431.1, 1.431.2, 1.431.3, 1.431.4, 1.432.0, 1.432.1, 1.433.0, 1.434.0, 1.434.1, 1.434.2, 1.434.3, 1.434.4, 1.435.0, 1.435.1, 1.436.0, 1.437.0, 1.437.1, 1.437.2, 1.437.3, 1.437.4, 1.438.0, 1.439.0, 1.439.1, 1.439.2, 1.439.3, 1.439.4, 1.440.0, 1.440.1, 1.440.2, 1.440.3, 1.440.4, 1.440.5, 1.441.0, 1.442.0, 1.443.0, 1.444.0, 1.445.0, 1.446.0, 1.447.0, 1.448.0, 1.449.0, 1.450.0, 1.451.0, 1.452.0, 1.453.0, 1.454.0, 1.455.0, 1.456.0, 1.457.0, 1.458.0, 1.459.0, 1.460.0, 1.461.0, 1.462.0, 1.463.0, 1.464.0, 1.465.0, 1.466.0, 1.467.0, 1.468.0, 1.469.0, 1.470.0, 1.471.0, 1.472.0, 1.473.0, 1.474.0, 1.475.0, 1.476.0, 1.477.0, 1.478.0, 1.479.0, 1.480.0, 1.481.0, 1.482.0, 1.483.0, 1.484.0, 1.485.0, 1.486.0, 1.487.0, 1.488.0, 1.489.0, 1.490.0, 1.491.0, 1.492.0, 1.493.0, 1.494.0, 1.495.0, 1.496.0, 1.497.0, 1.498.0, 1.499.0, 1.500.0, 1.501.0, 1.502.0, 1.503.0, 1.504.0, 1.505.0, 1.506.0, 1.507.0, 1.508.0, 1.509.0, 1.510.0, 1.511.0, 1.512.0, 1.513.0, 1.514.0, 1.515.0, 1.516.0, 1.517.0, 1.518.0, 1.519.0, 1.520.0, 1.521.0, 1.522.0, 1.523.0, 1.524.0, 1.525.0, 1.526.0, 1.527.0, 1.528.0, 1.529.0, 1.530.0, 1.531.0, 1.532.0, 1.533.0, 1.534.0, 1.535.0, 1.536.0, 1.537.0, 1.538.0, 1.539.0, 1.540.0, 1.541.0, 1.542.0, 1.543.0, 1.544.0, 1.545.0, 1.546.0, 1.547.0, 1.548.0, 1.549.0, 1.550.0, 1.551.0, 1.552.0, 1.553.0, 1.554.0, 1.555.0, 1.556.0, 1.557.0, 1.558.0, 1.559.0, 1.560.0, 1.561.0, 1.562.0, 1.563.0, 1.564.0, 1.565.0, 1.566.0, 1.567.0, 1.568.0, 1.569.0, 1.570.0, 1.571.0, 1.572.0, 1.573.0, 1.574.0, 1.575.0, 1.576.0, 1.577.0, 1.578.0, 1.579.0, 1.580.0, 1.581.0, 1.582.0, 1.583.0, 1.584.0, 1.585.0, 1.586.0, 1.587.0, 1.588.0, 1.589.0, 1.590.0, 1.591.0, 1.592.0, 1.593.0, 1.594.0, 1.595.0, 1.596.0, 1.597.0, 1.598.0, 1.599.0, 1.600.0, 1.601.0, 1.602.0, 1.603.0, 1.604.0, 1.605.0, 1.606.0, 1.607.0, 1.608.0, 1.609.0, 1.610.0, 1.611.0, 1.612.0, 1.613.0, 1.614.0, 1.615.0, 1.616.0, 1.617.0, 1.618.0, 1.619.0, 1.620.0, 1.621.0, 1.622.0, 1.623.0, 1.624.0, 1.625.0, 1.626.0, 1.627.0, 1.628.0, 1.629.0, 1.630.0, 1.631.0, 1.632.0, 1.633.0, 1.634.0, 1.635.0, 1.636.0, 1.637.0, 1.638.0, 1.639.0, 1.640.0, 1.641.0, 1.642.0, 1.643.0, 1.644.0, 1.645.0, 1.646.0, 1.647.0, 1.648.0, 1.649.0, 1.650.0, 1.651.0, 1.652.0, 1.653.0, 1.654.0, 1.655.0, 1.656.0, 1.657.0, 1.658.0, 1.659.0, 1.660.0, 1.661.0, 1.662.0, 1.663.0, 1.664.0, 1.665.0, 1.666.0, 1.667.0, 1.668.0, 1.669.0, 1.670.0, 1.671.0, 1.672.0, 1.673.0, 1.674.0, 1.675.0, 1.676.0, 1.677.0, 1.678.0, 1.679.0, 1.680.0, 1.681.0, 1.682.0, 1.683.0, 1.684.0, 1.685.0, 1.686.0, 1.687.0, 1.688.0, 1.689.0, 1.690.0, 1.691.0, 1.692.0, 1.693.0, 1.694.0, 1.695.0, 1.696.0, 1.697.0, 1.698.0, 1.699.0, 1.700.0, 1.701.0, 1.702.0, 1.703.0, 1.704.0, 1.705.0, 1.706.0, 1.707.0, 1.708.0, 1.709.0, 1.710.0, 1.711.0, 1.712.0, 1.713.0, 1.714.0, 1.715.0, 1.716.0, 1.717.0, 1.718.0, 1.719.0, 1.720.0, 1.721.0, 1.722.0, 1.723.0, 1.724.0, 1.725.0, 1.726.0, 1.727.0, 1.728.0, 1.729.0, 1.730.0, 1.731.0, 1.732.0, 1.733.0, 1.734.0, 1.735.0, 1.736.0, 1.737.0, 1.738.0, 1.739.0, 1.740.0, 1.741.0, 1.742.0, 1.743.0, 1.744.0, 1.745.0, 1.746.0, 1.747.0, 1.748.0, 1.749.0, 1.750.0, 1.751.0, 1.752.0, 1.753.0, 1.754.0, 1.755.0, 1.756.0, 1.757.0, 1.758.0, 1.759.0, 1.760.0, 1.761.0, 1.762.0, 1.763.0, 1.764.0, 1.765.0, 1.766.0, 1.767.0, 1.768.0, 1.769.0, 1.770.0, 1.771.0, 1.772.0, 1.773.0, 1.774.0, 1.775.0, 1.776.0, 1.777.0, 1.778.0, 1.779.0, 1.780.0, 1.781.0, 1.782.0, 1.783.0, 1.784.0, 1.785.0, 1.786.0, 1.787.0, 1.788.0, 1.789.0, 1.790.0, 1.791.0, 1.792.0, 1.793.0, 1.794.0, 1.795.0, 1.796.0, 1.797.0, 1.798.0, 1.799.0, 1.800.0, 1.801.0, 1.802.0, 1.803.0, 1.804.0, 1.805.0, 1.806.0, 1.807.0, 1.808.0, 1.809.0, 1.810.0, 1.811.0, 1.812.0, 1.813.0, 1.814.0, 1.815.0, 1.816.0, 1.817.0, 1.818.0, 1.819.0, 1.820.0, 1.821.0, 1.822.0, 1.823.0, 1.824.0, 1.825.0, 1.826.0, 1.827.0, 1.828.0, 1.829.0, 1.830.0, 1.831.0, 1.832.0, 1.833.0, 1.834.0, 1.835.0, 1.836.0, 1.837.0, 1.838.0, 1.839.0, 1.840.0, 1.841.0, 1.842.0, 1.843.0, 1.844.0, 1.845.0, 1.846.0, 1.847.0, 1.848.0, 1.849.0, 1.850.0, 1.851.0, 1.852.0, 1.853.0, 1.854.0, 1.855.0, 1.856.0, 1.857.0, 1.858.0, 1.859.0, 1.860.0, 1.861.0, 1.862.0, 1.863.0, 1.864.0, 1.865.0, 1.866.0, 1.867.0, 1.868.0, 1.869.0, 1.870.0, 1.871.0, 1.872.0, 1.873.0, 1.874.0, 1.875.0, 1.876.0, 1.877.0, 1.878.0, 1.879.0, 1.880.0, 1.881.0, 1.882.0, 1.883.0, 1.884.0, 1.885.0, 1.886.0, 1.887.0, 1.888.0, 1.889.0, 1.890.0, 1.891.0, 1.892.0, 1.893.0, 1.894.0, 1.895.0, 1.896.0, 1.897.0, 1.898.0, 1.899.0, 1.900.0, 1.901.0, 1.902.0, 1.903.0, 1.904.0, 1.905.0, 1.906.0, 1.907.0, 1.908.0, 1.909.0, 1.910.0, 1.911.0, 1.912.0, 1.913.0, 1.914.0, 1.915.0, 1.916.0, 1.917.0, 1.918.0, 1.919.0, 1.920.0, 1.921.0, 1.922.0, 1.923.0, 1.924.0, 1.925.0, 1.926.0, 1.927.0, 1.928.0, 1.929.0, 1.930.0, 1.931.0, 1.932.0, 1.933.0, 1.934.0, 1.935.0, 1.936.0, 1.937.0, 1.938.0, 1.939.0, 1.940.0, 1.941.0, 1.942.0, 1.943.0, 1.944.0, 1.945.0, 1.946.0, 1.947.0, 1.948.0, 1.949.0, 1.950.0, 1.951.0, 1.952.0, 1.953.0, 1.954.0, 1.955.0, 1.956.0, 1.957.0, 1.958.0, 1.959.0, 1.960.0, 1.961.0, 1.962.0, 1.963.0, 1.964.0, 1.965.0, 1.966.0, 1.967.0, 1.968.0, 1.969.0, 1.970.0, 1.971.0, 1.972.0, 1.973.0, 1.974.0, 1.975.0, 1.976.0, 1.977.0, 1.978.0, 1.979.0, 1.980.0, 1.981.0, 1.982.0, 1.983.0, 1.984.0, 1.985.0, 1.986.0, 1.987.0, 1.988.0, 1.989.0, 1.990.0, 1.991.0, 1.992.0, 1.993.0, 1.994.0, 1.995.0, 1.996.0, 1.997.0, 1.998.0, 1.999.0, 1.1000.0, 1.1001.0, 1.1002.0, 1.1003.0, 1.1004.0, 1.1005.0, 1.1006.0, 1.1007.0, 1.1008.0, 1.1009.0, 1.1010.0, 1.1011.0, 1.1012.0, 1.1013.0, 1.1014.0, 1.1015.0, 1.1016.0, 1.1017.0, 1.1018.0, 1.1019.0, 1.1020.0, 1.1021.0, 1.1022.0, 1.1023.0, 1.1024.0, 1.1025.0, 1.1026.0, 1.1027.0, 1.1028.0, 1.1029.0, 1.1030.0, 1.1031.0, 1.1032.0, 1.1033.0, 1.1034.0, 1.1035.0, 1.1036.0, 1.1037.0, 1.1038.0, 1.1039.0, 1.1040.0, 1.1041.0, 1.1042.0, 1.1043.0, 1.1044.0, 1.1045.0, 1.1046.0, 1.1047.0, 1.1048.0, 1.1049.0, 1.1050.0, 1.1051.0, 1.1052.0, 1.1053.0, 1.1054.0, 1.1055.0, 1.1056.0, 1.1057.0, 1.1058.0, 1.1059.0, 1.1060.0, 1.1061.0, 1.1062.0, 1.1063.0

All unaffected versions

1.1064.0, 1.1065.0, 1.1066.0, 1.1067.0, 1.1068.0, 1.1069.0, 1.1070.0, 1.1071.0, 1.1072.0, 1.1073.0, 1.1074.0, 1.1075.0, 1.1076.0, 1.1077.0, 1.1078.0, 1.1079.0, 1.1080.0, 1.1081.0, 1.1082.0, 1.1083.0, 1.1084.0, 1.1085.0, 1.1086.0, 1.1087.0, 1.1088.0, 1.1089.0, 1.1090.0, 1.1091.0, 1.1092.0, 1.1093.0, 1.1094.0, 1.1095.0, 1.1096.0, 1.1097.0, 1.1098.0, 1.1099.0, 1.1100.0, 1.1101.0, 1.1102.0, 1.1103.0, 1.1104.0, 1.1105.0, 1.1106.0, 1.1107.0, 1.1108.0, 1.1109.0, 1.1110.0, 1.1111.0, 1.1112.0, 1.1113.0, 1.1114.0, 1.1115.0, 1.1116.0, 1.1117.0, 1.1118.0, 1.1119.0, 1.1120.0, 1.1121.0, 1.1122.0, 1.1123.0, 1.1124.0, 1.1125.0, 1.1126.0, 1.1127.0, 1.1128.0, 1.1129.0, 1.1130.0, 1.1131.0, 1.1132.0, 1.1133.0, 1.1134.0, 1.1135.0, 1.1136.0, 1.1137.0, 1.1138.0, 1.1139.0, 1.1140.0, 1.1141.0, 1.1142.0, 1.1143.0, 1.1144.0, 1.1145.0, 1.1146.0, 1.1147.0, 1.1148.0, 1.1149.0, 1.1150.0, 1.1151.0, 1.1152.0, 1.1153.0, 1.1154.0, 1.1155.0, 1.1156.0, 1.1157.0, 1.1158.0, 1.1159.0, 1.1160.0, 1.1161.0, 1.1162.0, 1.1163.0, 1.1164.0, 1.1165.0, 1.1166.0, 1.1167.0, 1.1168.0, 1.1169.0, 1.1170.0, 1.1171.0, 1.1172.0, 1.1173.0, 1.1174.0, 1.1175.0, 1.1176.0, 1.1177.0, 1.1178.0, 1.1179.0, 1.1180.0, 1.1181.0, 1.1182.0, 1.1183.0, 1.1184.0, 1.1185.0, 1.1186.0, 1.1187.0, 1.1188.0, 1.1189.0, 1.1190.0, 1.1191.0, 1.1192.0, 1.1193.0, 1.1194.0, 1.1195.0, 1.1196.0, 1.1197.0, 1.1198.0, 1.1199.0, 1.1200.0, 1.1201.0, 1.1202.0, 1.1203.0, 1.1204.0, 1.1205.0, 1.1206.0, 1.1207.0, 1.1208.0, 1.1209.0, 1.1210.0, 1.1211.0, 1.1212.0, 1.1213.0, 1.1214.0, 1.1215.0, 1.1216.0, 1.1217.0, 1.1218.0, 1.1219.0, 1.1220.0, 1.1221.0, 1.1222.0, 1.1223.0, 1.1224.0, 1.1225.0, 1.1226.0, 1.1227.0, 1.1228.0, 1.1229.0, 1.1230.0, 1.1231.0, 1.1232.0, 1.1233.0, 1.1234.0, 1.1235.0, 1.1236.0, 1.1237.0, 1.1238.0, 1.1239.0, 1.1240.0, 1.1241.0, 1.1242.0, 1.1243.0, 1.1244.0, 1.1245.0, 1.1246.0, 1.1247.0, 1.1248.0, 1.1249.0, 1.1250.0, 1.1251.0, 1.1252.0, 1.1253.0, 1.1254.0, 1.1255.0, 1.1256.0, 1.1257.0, 1.1258.0, 1.1259.0, 1.1260.0, 1.1261.0, 1.1262.0, 1.1263.0, 1.1264.0, 1.1265.0, 1.1266.0, 1.1267.0, 1.1268.0, 1.1269.0, 1.1270.0, 1.1271.0, 1.1272.0, 1.1273.0, 1.1274.0, 1.1275.0, 1.1276.0, 1.1277.0, 1.1278.0, 1.1279.0, 1.1280.0, 1.1280.1, 1.1281.0, 1.1282.0, 1.1282.1, 1.1283.0, 1.1283.1, 1.1284.0, 1.1285.0, 1.1285.1, 1.1286.0, 1.1286.1, 1.1286.2, 1.1286.3, 1.1286.4, 1.1287.0, 1.1288.0, 1.1288.1, 1.1289.0, 1.1290.0, 1.1291.0, 1.1291.1, 1.1292.0, 1.1292.1, 1.1292.2, 1.1292.3, 1.1292.4, 1.1293.0, 1.1293.1, 1.1294.0, 1.1294.1, 1.1294.2, 1.1294.3, 1.1295.0, 1.1295.1, 1.1295.2, 1.1295.3, 1.1295.4, 1.1296.0, 1.1296.1, 1.1296.2, 1.1297.0, 1.1297.1, 1.1297.2, 1.1297.3, 1.1298.0

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin before 5.6.5; the package @snyk/snyk-hex-plugin before 1.1.6 are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the snyk test command on untrusted files. In most cases, an attacker positioned to control the command line arguments to the Snyk CLI would already be positioned to execute arbitrary commands. However, this could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline. This issue has been addressed in the latest Snyk Docker images available at https://hub.docker.com/r/snyk/snyk as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605.

References:

Identifiers

GHSA-4x6g-3cmx-w76r

CVE-2022-22984

Risk

Severity

Moderate

EPSS

EPSS Percentage: 0.01414

EPSS Percentile: 0.79508

Classification

General

Source

GitHub Advisory Database

Origin

Unspecified

Repository

https://github.com/snyk/cli

Date and time

Published

over 2 years ago

Updated

almost 2 years ago

API

JSON