snyk/snyk-php-plugin

snyk/snyk-php-plugin

GitHubGitHub
GitHubgithub.com
Releases30
Frequency3 months 2 days
Last Release
Stars9
Basic Snyk CLI plugin for PHP support
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-48963↗
7.5 HIGH—

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects.