CVE:CVE-2022-24441
CNNVD:CNNVD-202211-3716
Snyk CLI是美国Snyk公司的一个构建时工具，用于查找和修复项目中的已知漏洞。
Snyk CLI1.1064.0之前版本存在操作系统命令注入漏洞。攻击者利用该漏洞执行任意代码。
solution:Upgrade snyk snyk_cli to a higher version than 1.1064.0,and avoid the version (,1.1064.0); Upgrade snyk snyk_language_server to a higher version than 20221109.114426,and avoid the version (,20221109.114426]; Upgrade snyk snyk_security to a higher version than 1.1.30,1.8.0,2.4.47,20221115.132308,and avoid the version (,1.1.30],(,1.8.0],(,2.4.47],(,20221115.132308]