Snyk vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Snyk products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 31 products.

6.5CVE-2023-1065snykkubernetes_monitor+1
EPSS score
0.62%
This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploit the vulnerability the attacker does not need to be authenticated to Snyk but does need to know the target's Integration ID (which may or may not be the same as the Organization ID, although this is an unpredictable UUID in either case).5.4CVE-2023-1767snykadvisor+1
EPSS score
0.51%
The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package's page on Snyk Advisor.