snyk-gradle-plugin@2.12.4 vulnerabilities
Snyk CLI Gradle plugin
-
latest version
4.5.0
-
latest non vulnerable version
-
first published
7 years ago
-
latest version published
2 days ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the snyk-gradle-plugin package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
snyk-gradle-plugin is a plugin for the Snyk CLI tool, providing dependency metadata for Gradle projects. Affected versions of this package are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the This issue has been addressed in the latest Snyk Docker images available at https://hub.docker.com/r/snyk/snyk as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605. How to fix Command Injection? Upgrade |
<3.24.5
|