Explore packages and vulnerabilities by …
Operating system
Infrastructure as Code
Vulnerabilities from the last week
UNIX Symbolic Link (Symlink) Following
NO KNOWN SECURITY ISSUESINFLUENTIAL PROJECTHEALTHYLIMITED
Affects
@anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.
Affected versions of this package are vulnerable to UNIX Symbolic Link (Symlink) Following via the file access process. An attacker can access restricted files by leveraging symbolic links to bypass deny rules configured in settings.json.
Arbitrary Code Injection
Affects
fermat-mcp is a MCP Server for mathematical computation and plotting.
Affected versions of this package are vulnerable to Arbitrary Code Injection via the eqn_chart function. An attacker can execute arbitrary code by supplying crafted input to the equations argument.
Improper Output Neutralization for Logs
Affects
org.neo4j:neo4j is a Neo4j is a graph database management system developed by Neo4j, Inc.
Affected versions of this package are vulnerable to Improper Output Neutralization for Logs due to insufficient escaping of unicode characters in query.log output. A user can inject a malicious log line after a newline character, which includes misleading information.
Recent vulnerabilities disclosed by Snyk
- C
Arbitrary Code Injection in jsonpath (npm)- H
CRLF Injection in github.com/lxc/incus/v6/internal/instance (golang)- H
CRLF Injection in github.com/lxc/incus/internal/instance (golang)- H
Directory Traversal in github.com/lxc/incus/v6/internal/server/instance/drivers (golang)- H
Directory Traversal in github.com/lxc/incus/internal/server/instance/drivers (golang)
Snyk security
researchers
have disclosed
3463
vulnerabilities
About Snyk dependencies vulnerability database
Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer's toolkit.
