Snyk Vulnerability Database
The Snyk Vulnerability Database provides verified, detailed information and fixes for open source and container vulnerabilities.
Snyk Top 10: Vulnerabilities you should know
Find out which types of vulnerabilities are most likely to appear in your projects based on Snyk scan results and security research. Stay safe, stay educated, stay out of the headlines!
Directory traversal
A directory traversal (a.k.a. path traversal) attack aims to access files and directories that are stored outside of the authorized folder.
Cross-site scripting (XSS)
Cross-site scripting (XSS) is a website attack method that utilizes an injection to implant malicious scripts into trusted websites.
Hardcoded credentials
Credentials are hardcoded when they are written directly in the code, allowing everyone with access to the source code to access those credentials
Snyk Top 10
The top vulnerabilities of 2022
Read our Snyk Top 10 reports on the top open source and first-party code vulnerabilities of 2022.
Denial of service (DoS)
DoS attacks are used to shut down access to a network or server by bombarding the target with so many requests that it’s unable to process the load.
Remote code execution (RCE)
RCE attacks occur when a bad actor is able to run commands from a remote system that they shouldn’t have access to, leading to malware, exploits, and more.
Deserializing untrusted data
When an application deserializes untrusted data without sufficiently verifying that the resulting data will be valid, an attacker can control the state or the flow of the execution.
Security intelligence from code to cloud
Snyk’s security intelligence combines public sources, data from the developer community, proprietary expert research, machine learning, and human-in-the-loop AI.
Snyk Code knowledgebase
Snyk Code utilizes the most up-to-date code security information, reducing false positives and delivering actionable fixes.
Unified policy engine
Snyk’s unified policy engine extends the same security policies to infrastructure as code (IaC) files and runtime cloud resources.