OS Command Injection

snyk-php-plugin is vulnerable to OS Command Injection. The vulnerability is due to improper handling of the current working directory name, allowing code injection if Snyk test is run inside an untrusted PHP project...

Code Injection

Overview snyk-php-plugin is a plugin for the Snyk CLI tool, providing dependency metadata for PHP projects. Affected versions of this package are vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted projec...