Back to bug 2149734

Who When What Removed Added
Anten Skrabec 2022-11-30 18:03:06 UTC Summary CVE-2022-22984 snyk-hex-plugin: command injection CVE-2022-22984 snyk: snyk-hex-plugin: command injection
Paige Jung 2022-11-30 18:18:31 UTC Doc Text A vulnerability was found in the snyk-hex-plugin for snyk that allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. A vulnerability was found in the snyk-hex-plugin for snyk. This issue allows an attacker to run arbitrary commands on the host system where the Snyk CLI is installed by passing crafted command line flags.
Red Hat Bugzilla 2023-02-03 23:11:37 UTC CC ovanders
Red Hat Bugzilla 2023-07-07 08:31:32 UTC Assignee security-response-team nobody

Back to bug 2149734