npm/snyk CVE-2022-24441: high 8.8, EPSS 0.76%

snyk Code Injection vulnerability

Action: Upgrade snyk to 1.1064.0 or later.

npm i snyk@1.1064.0

Affected

Fixed versions

Sources

• osv: GHSA-4vrv-93c7-m92j
• https://nvd.nist.gov/vuln/detail/CVE-2022-24441
• https://github.com/snyk/snyk-eclipse-plugin/commit/b5a8bce25a359ced75f83a729fc6b2393fc9a495
• https://github.com/snyk/snyk-intellij-plugin/commit/56682f4ba6081ce1d95cb980cbfacd3809a826f4
• https://github.com/snyk/snyk-ls/commit/b3229f0142f782871aa72d1a7dcf417546d568ed
• https://github.com/snyk/snyk-visual-studio-plugin/commit/0b53dbbd4a3153c3ef9aaf797af3b5caad0f731a
• https://github.com/snyk/vscode-extension/commit/0db3b4240be0db6a0a5c6d02c0d4231a2c4ba708
• https://security.snyk.io/vuln/SNYK-JS-SNYK-3111871
• https://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution

CVE-2022-24441 · published 2023-07-06T19:24:04Z · modified 2025-04-24T21:40:56Z · JSON