npm/snyk-go-plugin CVE-2022-40764: high 7.8, EPSS 0.61%
Snyk CLI affected by Command Injection vulnerability
Action: Upgrade snyk-go-plugin to 1.19.1 or later.
npm i snyk-go-plugin@1.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.19.1 | - |
Fixed versions
| 1.19.1 |
Sources
- osv: GHSA-hpqj-7cj6-hfj8#npm/snyk-go-plugin
- https://nvd.nist.gov/vuln/detail/CVE-2022-40764
- https://github.com/snyk/cli
- https://github.com/snyk/cli/releases/tag/v1.996.0
- https://github.com/snyk/snyk-go-plugin/releases/tag/v1.19.1
- https://support.snyk.io/hc/en-us/articles/7015908293789-CVE-2022-40764-Command-Injection-vulnerability-affecting-Snyk-CLI-versions-prior-to-1-996-0
- https://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution
CVE-2022-40764 · published · modified · JSON