snyk github.com/snyk/go-application-framework vulnerabilities

Latest snyk github.com/snyk/go-application-framework CVEs

Newest publication first

1. CVE-2025-6624 Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

   Published 2025-06-26

   Low·CVSS 2.4 EPSS 0.18%

   Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.