VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

snyk: vulnerability history, versions and safety

snyk is a package in the npm ecosystem. Vulert records 4 vulnerabilities for it across 0 release, from Oct 2022 to Jun 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded H2 M1 L1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all snyk vulnerabilities

Vulert verdict on snyk 1.1308.3 i

Updated on 23 Oct 2026

Good news: 1.1308.3, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 4.

Package health score 83/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on 1.1308.3 or newer. This can change: a vulnerability disclosed tomorrow can affect 1.1308.3 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 1.1308.3 — unaffected i
  • Vulnerabilities on record 4 over 2 years · 0 in the last year i
  • Latest disclosure 26 Jun 2025 i
  • Highest CVSS 8.8 i
  • With no published fix 0 i
  • Stars 5,680 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for snyk, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
1.1308.3 23 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.771a2f9f1519a2333982e78d0870ef9aaf81ac94 23 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.28243706d540b64fa4d59a5e945a8a3217ff063a 22 Oct 2026 none Apache-2.0 — Details →
1.1308.2-rc.b12b3015627f33e5e2d06055a9fb4b9a3111af7e 22 Oct 2026 none Apache-2.0 — Details →
1.1308.2 21 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.559eb0fec89676ba27c318b921b8df5ee7cb6cd3 21 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.90922bdc5e90147340e1a54eae11415d68dad0d9 20 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.72c8b5b98bd4f72389b944246ebc941692b93229 19 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.2c35184497b54cbcb4a0d0f7b76f6d3c7797a3a0 16 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.cec52de5fc23195039d7b7f450a585f234f198bf 15 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.b252ba72496c0e1e27c456584c33f66037c0ac5a 15 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.9fd3bff85d4336fe4b41eb020382869fbc91c7d1 14 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.897de23f63b3c5e4a0d65f2f31ab5acec80394c7 14 Oct 2026 none Apache-2.0 — Details →
1.1308.1 14 Oct 2026 none Apache-2.0 — Details →
1.1308.1-rc.35b02b2326a87af9deaf9317630b383b33500a9e 14 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.5f14c765b340bb2b7eac06aff617d3094a667815 14 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.549d6918897220c6fe7d4444b4c9a016d68c8237 14 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.beda126bc3f63363fd0b96ec87377956b3c573f0 13 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.77edb764099df8f18b8231debde7eb4bfd4648d0 12 Oct 2026 none Apache-2.0 — Details →
1.1309.0-preview.3b5e0641a3c2d397e755a9667223f31a9e9f31d7 09 Oct 2026 none Apache-2.0 — Details →
1.1308.0 08 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.d6c408c5ed36453c6130479494ff7402f68266a7 08 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.05d5514d87378cc8f6d5d0fb2b29e42256b3ed76 07 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.f2ffaf8da4d04701c11c1e23fe0752dd26f5d0bb 06 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.07b24a85c654ae756458e3b8aac22e70a8ae77b4 05 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.bcfa4bbdcf59f28bfef04fdcb6661e53e5507e52 05 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.09698baecceea94916aab43d8b36dc184ffa2168 05 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.dd75097601d590eaddd76e0c38eff9ffedfc087f 02 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.4514106dc26594dde0bfb0b79c0d8c76ff0ba192 01 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.4d495e10c75873408ae47bc5185832ad46f4522e 01 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.a21e710eb58323ec08b7d1add21ba47a0c9152c2 01 Oct 2026 none Apache-2.0 — Details →
1.1308.0-preview.ab08be6a44773c37f838b11698a2d615350c48cb 30 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.841f9a63406191822d904b5511fb2e9ea79cb839 29 Sep 2026 none Apache-2.0 — Details →
1.1308.0-rc.3f5297bba4b8ecb04e7b160c4e80e2eedfa9b7fc 29 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.5ccd92eb1a37d38b3b07b8597671f4ba83b7c2dd 29 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.2543307acffce806166a8c6920f8ab78eca29cf5 28 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.471844dd0dbc68a6fe8fa4ac8c2efbcd8250b515 24 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.b60e226023f5bc6e0e814e7e74d4dd9e2ec06475 24 Sep 2026 none Apache-2.0 — Details →
1.1307.4 23 Sep 2026 none Apache-2.0 — Details →
1.1307.4-rc.8be39f18278e2d9729373f71a71d93de8a1f5efd 23 Sep 2026 none Apache-2.0 — Details →
1.1307.4-rc.7298fef6db78d0351ce9ae6a79a95fd46d02560a 23 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.d13c20e9070be3ef9599574a6e57a5614d29306b 22 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.37c8024f2af81b51f4c92827c11a28575ef15409 21 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.ee105fe7375d8ebc63fb3e5de27115bdfb579cfc 21 Sep 2026 none Apache-2.0 — Details →
1.1307.3 18 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.6c3d1258e57c113489d929dc46ee7404b9274a20 10 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.0c4dc30bcd369c4e927fdcef0d10d27c170ac200 10 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.3fccfba8108f79b7a434d4f77f16dd9b6d7783f0 10 Sep 2026 none Apache-2.0 — Details →
1.1307.2-rc.f2bc9ec36706bf751d52fff1ce773d3a97a909a5 09 Sep 2026 none Apache-2.0 — Details →
1.1307.2 09 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.a9cf02af9d595fbe50f5e8c36a5c9659af9e8dc8 08 Sep 2026 none Apache-2.0 — Details →
1.1307.1 07 Sep 2026 none Apache-2.0 — Details →
1.1307.1-rc.e5eb3e5e78b3cc0632490c245f714f6e4de9b02d 07 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.07d05bd6aa31a86e3edc81bd0502cceed5e1c894 05 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.8453f820d480b7ff4dc7cdddfd8880ef47c4f18f 03 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.b71179b3999afe63c400fa7c1f61948480d12a3b 03 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.59c9c326fccb9d6c911ebf09185904b49fbf4e70 03 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.bb49573e3a4f4103768e99dbe4be21a1a4c0851b 02 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.b42b4032a97327fd505f1107565f8fcaa889d525 02 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.c8ddecaf0f1fe1d23cd48ebf257b7f614ef10f98 02 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.39a136c119bd5ed052340f7c2d1e719d3190532c 01 Sep 2026 none Apache-2.0 — Details →
1.1308.0-preview.465a141f97c61895e48fb2473c4a0b9d9c51e410 31 Aug 2026 none Apache-2.0 — Details →
1.1308.0-preview.1a07536937119e188f57c070009c6bca9bea3218 31 Aug 2026 none Apache-2.0 — Details →
1.1307.0 26 Aug 2026 none Apache-2.0 — Details →
1.1307.0-rc.8e67f447a762f9412f26e7821bd22e8b7268fd78 26 Aug 2026 none Apache-2.0 — Details →
1.1307.0-rc.8f5e760c76abe6bec5333e7d80d380a0d4d45325 26 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.8e58164caec6ca4876d1232e27a986e8302cec65 25 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.7b27bcc3d7576da80141b0f1af0096303c438fe7 25 Aug 2026 none Apache-2.0 — Details →
1.1307.0-rc.d606584188d9e9e8bb085034f2182e0d3a3de210 25 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.acaccefd7aad74fa5c33fac7ae99eaca2939e98a 24 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.3f209c9d3abd1226b7f2bde3d16b96637ad807ce 21 Aug 2026 none Apache-2.0 — Details →
1.1307.0-rc.802b93f9ff26296fa73bb60816ec23e72de23e78 20 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.22d3158a6d9ecfd6e936dc426ddc4dd456f0a9f0 20 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.20f306fd001bc97c111863603a9a8ab380e15ee0 20 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.54eeba3a53f4e91f3e0afb45fe859cf6d8794007 18 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.a33c23e059aeb66f75789ca55b5aebf068dc7e66 17 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.26f0543da50200ccf22d93adaf2a177dde0f22eb 17 Aug 2026 none Apache-2.0 — Details →
1.1306.4 13 Aug 2026 none Apache-2.0 — Details →
1.1306.4-rc.031506ec5f6b36f73089566960399ad17612b864 13 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.9ff39e78d5b652c672b34194c2e94e8e346fbe79 13 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.237a02c24c5f079e4ce3169f070ac8ad91200338 13 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.47321b38abd21423d6f2d4701558e2dd21b462c1 12 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.193a08eb2dad4400d545a3c8af52f23b696eb8df 11 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.45996736632f1091850e6a765c82fcee98a27a5e 11 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.c3e52bd2b8af9be2a8d746dd1e8623c4c1ceb0b4 10 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.86f304f0aa443eef29f874057d5114a3c956dda6 10 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.be1950e03efdf1e0ba5e14b881a9aa1ab715d1df 10 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.4bf8b0075f4e689d41efe85df528146060031a02 07 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.a0966e9a912a690a56094bad5c6149ead51cade2 07 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.a2b199f0cdf0a8b6d0dd7e1c8496b1dc0e24c71e 07 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.278c62cee92eeec1dd710a4329d36085a7c31cb2 07 Aug 2026 none Apache-2.0 — Details →
1.1306.3 06 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.ce8f9213cc141252d6fd156ab52d6806327714d8 06 Aug 2026 none Apache-2.0 — Details →
1.1306.3-rc.23969373d31927ebac71a74abf707fe0c3845a32 05 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.c9683be9db3e2d5aeb9f540bb6c2e92c29e666b2 05 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.8a1ae68efc7b389b9b066cc24e6ad8ed70a27e74 05 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.7fe39616d52f7dd465a48f50406ef70deecfc6d9 05 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.3b9cfbeef1a548c684554a33bc8519a1dfeec8f8 04 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.a23003a027c3125b352ecd01f716be1a802730a5 03 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.f5314aa6c34095074f2fe32ae05dcfdb98170d10 03 Aug 2026 none Apache-2.0 — Details →
1.1307.0-preview.9a333cb79d60afdf3d8812c9afc3b09b2dabc1d4 31 Jul 2026 none — — Details →
1.1307.0-preview.186a75ffaafb9f9ee6e22e8468745f61025b9780 31 Jul 2026 none — — Details →
1.1307.0-preview.374e5b7f9ffd6f981bbb5050030484a778119a4d 31 Jul 2026 none — — Details →
1.1307.0-preview.2072df4ab2e112e268ddea143d4f1512278b9677 30 Jul 2026 none — — Details →
1.1307.0-preview.29b155210b2c9cb0b792410023c5488948253e51 30 Jul 2026 none — — Details →
1.1307.0-preview.297fcde98ea3ac7286e80dabeaaf618c4d6882e8 29 Jul 2026 none — — Details →
1.1307.0-preview.6646233cfbbd2c736d77ad0f75d36d38ffd5bc96 29 Jul 2026 none — — Details →
1.1307.0-preview.cb3c3135a96362a320020e2082149e0a50b7d26b 28 Jul 2026 none — — Details →
1.1307.0-preview.0846157b78adee6e2b67faeb37813a4d94646212 28 Jul 2026 none — — Details →
1.1307.0-preview.52c2366f27fc0154b608c64dc2450dfbda6b5428 27 Jul 2026 none — — Details →
1.1306.2 27 Jul 2026 none — — Details →
1.1306.2-rc.7aca6820231c190f1d346f60e5255939ebd219cc 27 Jul 2026 none — — Details →
1.1307.0-preview.32c71b7ebf5eaa4f1b43fa9d66e235399ddd488f 27 Jul 2026 none — — Details →
1.1307.0-preview.1092e2bbe1b9ca6d424e8b5752db99a2db15254a 23 Jul 2026 none — — Details →
1.1307.0-preview.91928dab0e1a2966de1d90a2f917496fa3032222 23 Jul 2026 none — — Details →
1.1307.0-preview.ff238f254eb8d5a92ebe3bb849f2e1967c16c1b6 21 Jul 2026 none — — Details →
1.1307.0-preview.c3af54cb747aca70ad6eec4e76fddf71071cdb59 20 Jul 2026 none — — Details →
1.1307.0-preview.41a74995fa57611c84b68c99f7558c34da9da2ee 17 Jul 2026 none — — Details →
1.1307.0-preview.9b60075a2d17147572e3691af7ca06e0ad0b990e 17 Jul 2026 none — — Details →
1.1306.1 16 Jul 2026 none — — Details →

The newest 120 of 2,133 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 2
  • 2023 1
  • 2025 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for snyk

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-24441: snyk Code Injection Vulnerability 8.8 high 1.1064.0 06 Jul 2023
CVE-2022-40764: Command Injection vulnerability in Snyk CLI 7.8 high 1.996.0 04 Oct 2022
CVE-2025-6624: Snyk CLI Sensitive Information Exposure in Debug Mode 7.2 low 1.1297.3 26 Jun 2025
CVE-2022-22984: Snyk plugins vulnerable to Command Injection 6.3 medium 1.1064.0 30 Nov 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About snyk

Is snyk safe to use?

Vulert records 4 vulnerabilities for snyk in npm: 0 critical, 2 high, 1 medium and 1 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is snyk's Vulert package health score?

Vulert scores snyk 83/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of snyk affected?

No. 1.1308.3, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does snyk have?

4 vulnerabilities are recorded for snyk in the npm ecosystem: 0 critical, 2 high, 1 medium and 1 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new snyk vulnerabilities disclosed?

0 vulnerabilities were recorded for snyk in the last 12 months, and the oldest entry in this database dates to 04 Oct 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of snyk are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor snyk for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the snyk version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.