We’ve disclosed 1 vulnerabilities 🎉
The Snyk security team helps disclose many vulnerabilities every month, in key packages across a variety
of ecosystems. We work closely with open source package maintainers in order to ensure all vulnerabilities
are responsibly and efficiently handled in a timely manner.
Our ever-growing list of sources include:
-
Vulnerability disclosures and reports sent to us from members of the community
-
Vulnerabilities we've uncovered by monitoring security chatter and trends across open source ecosystems
-
Partnerships with organizations and academic institutions
-
Research done internally by the Snyk Security Team
Featured disclosed vulnerabilities
Recently disclosed vulnerabilities by Snyk
- H
Denial of Service (DoS) in http-proxy-middleware (npm)
- M
Cross-site Scripting (XSS) in markdown-to-jsx (npm)
- C
Remote Code Execution (RCE) in jsonpath-plus (npm)
- M
Arbitrary Argument Injection in ggit (npm)
- M
Command Injection in ggit (npm)
- C
Malicious Package in braintree_express_example (npm)
- C
Malicious Package in braintree.github.io (npm)
- C
Malicious Package in annotation-app (npm)
- C
Malicious Package in kubeman (npm)
- C
Malicious Package in nanoslackts-env-test (npm)