-
Snyk reports a security vulnerability for this package because of the dependency on the lodash.template standalone package.
You can see the report here: https://security.snyk.io/vuln/SNYK-JS-LODASHTE…
-
Version 2.0.0 of ImageSharp is affected by this vulnerability:
https://github.com/advisories/GHSA-65x7-c272-7g7r
-
Infinite loop high level vulnerability found in dependent library [snyk vulnerability](https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6612984), [CVE](https://www.cve.org/CVERecord?id=CVE-2024…
-
Hi, Snyk is identifying an Arbitrary File Upload vulnerability in my project (deemed as Critical) introduced through: `sumo-logger@2.8.1 > superagent@7.1.3 > formidable@2.0.1`. It seems to have been f…
s-huh updated
4 months ago
-
- `node -v`: v18.19.0
- `npm -v`: 10.2.3
- OS: (e.g. OSX, Linux, Windows, ...)
- Command run: (e.g. `snyk-api-import ...`, ...)
### Expected behaviour
Please share _expected_ behaviour.
The …
-
Hey team! Would it be possible to add support for Snyk Code projects and returning the delta of the results?
-
- [ ] Regular Expression Denial of Service (ReDoS)
- [ ] Prototype Pollution
- [ ] fix dev warnings as well
- [ ] install yarn 1.13.0 as dev dependancy
- [ ] fix any additional issues `yarn audi…
-
## What's going wrong?
`inflight` package that `pm2` depends on (`pm2@5.3.0` › `yamljs@0.3.0` › `glob@7.2.0` › `inflight@1.0.6`) seems to have a memory leak issue according to Snyk: https://security.…
-
When installing snyk in kibana, the variables don't allow having some special characters at the start (like `*` and `&`), but this could be easily solved by using the [escape_string](https://github.co…
-
While testing out the new `sca/Makefile` in `shadedetector`, I ran `make -j 4` on a fresh clone of this repo to run up to 4 tasks in parallel. However, the `snyk` task generating a report for `CVE-201…