CVE-2026-46597 vulnerabilities

Vulnerabilities for packages: buildah, go-discover, wolfictl, pulumi-kubernetes-operator, flux-kustomize-controller, containerd, external-dns, crossplane-provider-aws-eks, cloudflared, mods, cluster-api-azure-controller, mattermost, docker-compose, rancher, dagger, gptscript,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: wolfictl, pulumi-kubernetes-operator, containerd, external-dns, mattermost, rancher, dagger, gptscript, wal-g, k9s, podman, telegraf, pulumi, syft, gh, gatus, nuclei, trivy, kubescape, minio, loki, nfpm, chisel, gomplate, argo-events, flux, k3s, rancher-agent,...

Snyk CLI 安全漏洞

Snyk CLI is a build-time tool from Snyk USA for finding and fixing known vulnerabilities in projects. A security vulnerability exists in Snyk CLI versions prior to 1.1294.0 that stems from vulnerability to code injection attacks when scanning for untrusted Gradle projects...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to...

Snyk wc-cmd Command Injection Vulnerability

Snyk wc-cmd is an application from Snyk Corporation that provides statistics on the number of bytes, words, and lines in a given file, and displays the results as output. A command injection vulnerability exists in wc-cmd, which originates from a command injection attack on the index.js file...