io.snyk/mcp
Easily find and fix security issues in your applications leveraging Snyk platform capabilities.
1.1304.2version the registry lists (2 published)
4reported issues
Nolisted version affected
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.snyk/mcp
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-6hwc-9h8r-3vmfSnyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE modeAlso filed as CVE-2025-6624, GO-2025-3789 | low | Not flagged | Jun 26, 2025 |
| GHSA-4vrv-93c7-m92jsnyk Code Injection vulnerabilityAlso filed as CVE-2022-24441 | high | Not flagged | Jul 6, 2023 |
| GHSA-4x6g-3cmx-w76rSnyk plugins vulnerable to Command InjectionAlso filed as CVE-2022-22984 | medium | Not flagged | Nov 30, 2022 |
| GHSA-hpqj-7cj6-hfj8Snyk CLI affected by Command Injection vulnerabilityAlso filed as CVE-2022-40764 | high | Not flagged | Oct 4, 2022 |
Versions in the registry
1.1304.2 (listed), 1.1299.1