Snyk CLI v1.1306.4 released
This release improves proxy error messaging with redacted credentials and updated error codes for easier CI/network troubleshooting, and includes embedded runtime updates that patch six high-severity CVEs and additional OpenSSL security fixes.
We are pleased to announce Snyk CLI release, v1.1306.4
This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.
This update includes the following:
Clearer error messages when the CLI cannot reach a configured proxy. Failures now report the proxy URL the CLI attempted to use, with credentials redacted, along with the specific error code
SNYK-CLI-0028, making proxy misconfiguration quicker to diagnose in CI and behind corporate networks.An updated embedded runtime, moving Node.js from 22.22.2 to 22.23.2 and OpenSSL from 3.5.5 to 3.5.7, which brings in fixes for six high-severity CVEs plus additional OpenSSL security fixes.
Fixed vulnerabilities:
CVE-2026-45447
CVE-2026-48618
CVE-2026-48933
CVE-2026-56846
CVE-2026-56848
CVE-2026-58043
If you have any questions, feel free to reach out to the Snyk support team. We encourage everyone to upgrade to the latest version to take advantage of these improvements.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk CLI v1.1308.1 released
HTML report output is now available by default without preview features, and project names are consistently displayed in test summaries. This release also patches multiple security vulnerabilities.
Pending ignore requests now visible on Project's Issues page
Issues with pending ignore requests now display a clear "Pending Ignore Request" status on the Issues page and in issue details, with filtering support. The issues API now reports pending as part of an issue's ignore status for programmatic distinction of open, pending, and ignored findings.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.