Snyk ≫ Snyk Language Server

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

8.8

CVE-2022-24441

Exploit

EPSS 1.46%
Published 30.11.2022 13:15:10
Last modified 24.04.2025 20:15:22

The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be...