npm/snyk-php-plugin CVE-2024-48963: high 7.5, EPSS 0.47%

OS Command Injection in Snyk php plugin

Action: Upgrade snyk-php-plugin to 1.10.0 or later.

npm i snyk-php-plugin@1.10.0

Affected

Fixed versions

Sources

• osv: GHSA-69f9-h8f9-7vjf
• https://nvd.nist.gov/vuln/detail/CVE-2024-48963
• https://github.com/snyk/snyk-php-plugin/commit/9189f093b94f9ce51672f6919ffbc98171fd66d4
• https://github.com/snyk/snyk-php-plugin
• https://github.com/snyk/snyk-php-plugin/releases/tag/v1.10.0

CVE-2024-48963 · published 2024-10-23T21:30:28Z · modified 2026-09-10T03:50:19.286430053Z · JSON