CVE-2020-7650

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

CVE-2020-7650

Snyk-Broker versions 4.72.0+ up to 4.73.0are vulnerable to Arbitrary File Read, exposing files ending in .yaml, .yml, or .json to users with access to Snyk’s internal network. The issue is fixed in 4.73.1 per the connected advisories; upgrade to 4.73.1 or later to mitigate.