{"schema_version":1,"title":"Snyk vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Snyk: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75486, was published on 28 August 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/snyk","json_url":"https://junglewise.ai/threats/vendors/snyk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/snyk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":1},"latest":[{"cve":"CVE-2026-75486","cvss":8,"epss":0.0232,"slug":"cve-2026-75486-snyk-sweater-comb-command-injection-in-configuration-parsing","title":"Snyk Sweater Comb command injection in configuration parsing","severity":"high","exploited":false,"published_at":"2026-08-28T20:19:54.027+00:00","url":"https://junglewise.ai/threats/cve-2026-75486-snyk-sweater-comb-command-injection-in-configuration-parsing"},{"cve":"CVE-2022-24441","cvss":3.1,"epss":0.0073,"slug":"cve-2022-24441-snyk-code-injection-via-malicious-build-files","title":"Snyk code injection via malicious build files","severity":"low","exploited":false,"published_at":"2023-07-06T19:24:04+00:00","url":"https://junglewise.ai/threats/cve-2022-24441-snyk-code-injection-via-malicious-build-files"},{"cve":"CVE-2022-22984","cvss":3.1,"epss":0.0309,"slug":"cve-2022-22984-snyk-plugins-command-injection","title":"Snyk plugins command injection","severity":"low","exploited":false,"published_at":"2022-11-30T15:30:27+00:00","url":"https://junglewise.ai/threats/cve-2022-22984-snyk-plugins-command-injection"},{"cve":"CVE-2022-40764","cvss":3.1,"epss":0.0057,"slug":"cve-2022-40764-snyk-cli-command-injection-vulnerability","title":"Snyk CLI command injection vulnerability","severity":"low","exploited":false,"published_at":"2022-10-04T00:00:22+00:00","url":"https://junglewise.ai/threats/cve-2022-40764-snyk-cli-command-injection-vulnerability"},{"cve":"CVE-2020-7649","cvss":3.1,"epss":0.0158,"slug":"cve-2020-7649-snyk-broker-path-traversal-vulnerability","title":"snyk-broker path traversal vulnerability","severity":"low","exploited":false,"published_at":"2022-07-26T00:01:05+00:00","url":"https://junglewise.ai/threats/cve-2020-7649-snyk-broker-path-traversal-vulnerability"},{"cve":"CVE-2020-7652","cvss":3.1,"epss":0.0169,"slug":"cve-2020-7652-snyk-broker-arbitrary-file-read-via-directory-traversal","title":"Snyk Broker arbitrary file read via directory traversal","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:24+00:00","url":"https://junglewise.ai/threats/cve-2020-7652-snyk-broker-arbitrary-file-read-via-directory-traversal"},{"cve":"CVE-2020-7653","cvss":3.1,"epss":0.0113,"slug":"cve-2020-7653-snyk-broker-arbitrary-file-read-via-symlink","title":"Snyk Broker arbitrary file read via symlink","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:21+00:00","url":"https://junglewise.ai/threats/cve-2020-7653-snyk-broker-arbitrary-file-read-via-symlink"},{"cve":"CVE-2020-7648","cvss":3.1,"epss":0.0113,"slug":"cve-2020-7648-snyk-broker-arbitrary-file-read","title":"Snyk Broker arbitrary file read","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:19+00:00","url":"https://junglewise.ai/threats/cve-2020-7648-snyk-broker-arbitrary-file-read"},{"cve":"CVE-2020-7650","cvss":3.1,"slug":"cve-2020-7650-snyk-broker-arbitrary-file-read-via-path-traversal","title":"Snyk Broker arbitrary file read via path traversal","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:16+00:00","url":"https://junglewise.ai/threats/cve-2020-7650-snyk-broker-arbitrary-file-read-via-path-traversal"},{"cve":"CVE-2020-7654","cvss":3.1,"epss":0.0112,"slug":"cve-2020-7654-snyk-broker-information-exposure-in-debug-logging","title":"Snyk Broker information exposure in debug logging","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:14+00:00","url":"https://junglewise.ai/threats/cve-2020-7654-snyk-broker-information-exposure-in-debug-logging"},{"cve":"CVE-2020-7651","cvss":3.1,"epss":0.0112,"slug":"cve-2020-7651-snyk-broker-arbitrary-file-read-via-patch-history","title":"Snyk Broker arbitrary file read via patch history","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:11+00:00","url":"https://junglewise.ai/threats/cve-2020-7651-snyk-broker-arbitrary-file-read-via-patch-history"}],"vendor":{"hub":true,"name":"Snyk","slug":"snyk","homepage":"https://snyk.io","description":"Software development company providing security and vulnerability management tools and services.","url":"https://junglewise.ai/threats/vendors/snyk"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-75486","cvss":8,"epss":0.0232,"slug":"cve-2026-75486-snyk-sweater-comb-command-injection-in-configuration-parsing","title":"Snyk Sweater Comb command injection in configuration parsing","severity":"high","exploited":false,"published_at":"2026-08-28T20:19:54.027+00:00","url":"https://junglewise.ai/threats/cve-2026-75486-snyk-sweater-comb-command-injection-in-configuration-parsing"},{"cve":"CVE-2022-22984","cvss":3.1,"epss":0.0309,"slug":"cve-2022-22984-snyk-plugins-command-injection","title":"Snyk plugins command injection","severity":"low","exploited":false,"published_at":"2022-11-30T15:30:27+00:00","url":"https://junglewise.ai/threats/cve-2022-22984-snyk-plugins-command-injection"},{"cve":"CVE-2020-7652","cvss":3.1,"epss":0.0169,"slug":"cve-2020-7652-snyk-broker-arbitrary-file-read-via-directory-traversal","title":"Snyk Broker arbitrary file read via directory traversal","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:24+00:00","url":"https://junglewise.ai/threats/cve-2020-7652-snyk-broker-arbitrary-file-read-via-directory-traversal"},{"cve":"CVE-2020-7649","cvss":3.1,"epss":0.0158,"slug":"cve-2020-7649-snyk-broker-path-traversal-vulnerability","title":"snyk-broker path traversal vulnerability","severity":"low","exploited":false,"published_at":"2022-07-26T00:01:05+00:00","url":"https://junglewise.ai/threats/cve-2020-7649-snyk-broker-path-traversal-vulnerability"},{"cve":"CVE-2020-7653","cvss":3.1,"epss":0.0113,"slug":"cve-2020-7653-snyk-broker-arbitrary-file-read-via-symlink","title":"Snyk Broker arbitrary file read via symlink","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:21+00:00","url":"https://junglewise.ai/threats/cve-2020-7653-snyk-broker-arbitrary-file-read-via-symlink"},{"cve":"CVE-2020-7648","cvss":3.1,"epss":0.0113,"slug":"cve-2020-7648-snyk-broker-arbitrary-file-read","title":"Snyk Broker arbitrary file read","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:19+00:00","url":"https://junglewise.ai/threats/cve-2020-7648-snyk-broker-arbitrary-file-read"},{"cve":"CVE-2020-7654","cvss":3.1,"epss":0.0112,"slug":"cve-2020-7654-snyk-broker-information-exposure-in-debug-logging","title":"Snyk Broker information exposure in debug logging","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:14+00:00","url":"https://junglewise.ai/threats/cve-2020-7654-snyk-broker-information-exposure-in-debug-logging"},{"cve":"CVE-2020-7651","cvss":3.1,"epss":0.0112,"slug":"cve-2020-7651-snyk-broker-arbitrary-file-read-via-patch-history","title":"Snyk Broker arbitrary file read via patch history","severity":"low","exploited":false,"published_at":"2020-06-03T22:02:11+00:00","url":"https://junglewise.ai/threats/cve-2020-7651-snyk-broker-arbitrary-file-read-via-patch-history"},{"cve":"CVE-2022-24441","cvss":3.1,"epss":0.0073,"slug":"cve-2022-24441-snyk-code-injection-via-malicious-build-files","title":"Snyk code injection via malicious build files","severity":"low","exploited":false,"published_at":"2023-07-06T19:24:04+00:00","url":"https://junglewise.ai/threats/cve-2022-24441-snyk-code-injection-via-malicious-build-files"},{"cve":"CVE-2022-40764","cvss":3.1,"epss":0.0057,"slug":"cve-2022-40764-snyk-cli-command-injection-vulnerability","title":"Snyk CLI command injection vulnerability","severity":"low","exploited":false,"published_at":"2022-10-04T00:00:22+00:00","url":"https://junglewise.ai/threats/cve-2022-40764-snyk-cli-command-injection-vulnerability"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Snyk Broker","slug":"broker","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/broker"}]}