https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:34:13.100318+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197243 EUVD-2026-197243 2026-10-07T23:34:13.102504+00:00 EUVD-2026-197243 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48963 fkie_cve-2024-48963 2026-10-07T23:34:13.102576+00:00

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects.

 https://cve.radiocsirt.org/vuln/ghsa-69f9-h8f9-7vjf GHSA-69f9-h8f9-7vjf — OS Command Injection in Snyk php plugin 2026-10-07T23:34:13.102608+00:00

Affected: npm: snyk-php-plugin

The Snyk php plugin is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects.