-
See how reliable and accessible this vulnerability database is
https://snyk.io/
https://github.com/snyk/snyk
-
Synk is just an automated tool to check the dependencies that are used for vulnerabilities. So if someone makes a pull request for a npm package with a known vulnerability then we'll be alerted to th…
-
Currently the package is dependent on `NETStandard.Library@1.6.1` which by it's own dependencies generates security warnings (6 in total). Updating it to the current latest version v2.0.3 solves the s…
-
## Current behavior
- `snyk` dependency [is used](https://github.com/cfpb/cfgov-refresh/blob/master/package.json#L101) for running `npm run test`, however, this requires an authenticated snyk accou…
-
Per old agenda AI
- snyk for dependaBot type of checks
- look into adding a bot that scans for security issues too
-
create a new "test" workflow that will scan the image.
do not fail the deployment yet
-
## CKAN version
2.10.4
## Describe the bug
snyk scan reports Remote Code Execution (RCE) HIGH vulnerability for WERKZEUG version below `3.0.3`.
https://security.snyk.io/vuln/SNYK-PYTHON-WERKZEUG…
-
To apply some unreleased security patches.
-
Within the [LFX Security](https://lfx.linuxfoundation.org/tools/security) service, [Snyk](https://docs.snyk.io/scan-applications/supported-languages-and-frameworks/python) is attempting to scan securi…
-
the package @okta/jwt-verifier@3.0.0 is having njwt@2.0.0 as a dependency\
https://www.npmjs.com/package/@okta/jwt-verifier?activeTab=dependencies
snyk has reported an issue with njwt@2.0.0
…