https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6624.htmlhttps://patchthecve.com/cve/CVE-2025-6624.htmlWed, 17 Jun 2026 10:02:16 +0000HIGH 7.2: Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or DEBUG/TRAChttps://patchthecve.com/cve/CVE-2024-48964.htmlhttps://patchthecve.com/cve/CVE-2024-48964.htmlWed, 17 Jun 2026 07:59:08 +0000HIGH 7.5: The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trustehttps://patchthecve.com/cve/CVE-2024-48963.htmlhttps://patchthecve.com/cve/CVE-2024-48963.htmlWed, 17 Jun 2026 07:59:07 +0000HIGH 7.5: The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted p