synk CVE 脆弱性と CVE 一覧（6）

製品（CPE）: — CVE 件数: 6

synk 脆弱性概要

synk 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。

過去の問題は主にパス処理の欠陥などに関し、一部はファイル上書きを招き、vendor surface software deployment and vendor surface production workloads 関連の場面に影響します。

掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。

脆弱性分布の推移（直近24か月）

CVE	概要	ソース	CVSS 最大値	EPSS（%）	公開	更新
CVE-2020-7654	All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.	[email protected]	7.5	1.12%	2020-05-29	2026-06-16
CVE-2020-7650	All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.	[email protected]	6.5	1.13%	2020-05-29	2026-06-16
CVE-2020-7648	All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. `#package.json`	[email protected]	6.5	1.13%	2020-05-29	2026-06-16
CVE-2020-7653	All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.	[email protected]	6.5	1.13%	2020-05-29	2026-06-16
CVE-2020-7652	All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.	[email protected]	6.5	1.69%	2020-05-29	2026-06-16
CVE-2020-7651	All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.	[email protected]	4.3	1.11%	2020-05-29	2026-06-16

cvelogic Threat Intelligence