Tag

cve-2022-40764

Safeguard articles tagged "cve-2022-40764" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Management

Root cause: CVE-2022-40764, the Snyk CLI command injection

A crafted vendor.json field let attackers run shell commands from inside a security scanner — CVE-2022-40764 shows why CLI tools must never build shell strings.

Jul 12, 20266 min read