We are pleased to announce Snyk CLI release, v1.1307.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Removed an unused experimental feature.Fixed vulnerabilities: CVE-2026-84445If you have any questions, feel free to reach out to the Snyk support team. We encourage everyo…
We are pleased to announce Snyk CLI release, v1.1307.1This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test again reports SNYK-CLI-0008 and exits with code 3 when a repository contains no supported manifest files, instead of a generic SNYK-CLI-0000 with exit code 2. sn…
The "What"Repo Content Sync keeps your Snyk Projects aligned with what your repositories actually contain. When a change is merged to a branch Snyk monitors, Snyk creates and begins monitoring Projects for newly added manifest, Dockerfile, and configuration files, and deactivates the Projects whose files were removed. A file that is moved or renamed is picked up at its new path, and the Project at…
We are pleased to announce the latest stable Snyk CLI release, v1.1307.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:Secretssnyk secrets test now supports exclusions — add files or paths to the exclude section…
Starting August 18, 2026, a user's Evo data is limited to the Snyk Organizations they can read.Until now, everyone with access to Evo saw every repository, asset, and issue in the Tenant. Evo now reuses your existing Snyk Organization hierarchy, so there is nothing new to model and no migration to run. Nobody loses access until an administrator changes their role.What's new:Tenant Viewer now grant…
This update is available on September 14, 2026. It improves coverage and precision across Snyk Code: template files are analyzed, Java framework and library support is extended, detection gaps are closed in six languages, and .gitignore no longer hides committed files from analysis.Template filesSnyk Code analyzes template files and follows data from your application code into the template. Cross-…
Starting August 17, 2026, Evo by Snyk uses a rebuilt model risk score to evaluate the AI models discovered in your organization.The previous Risk Index is replaced by a single score from 0–1,000 that combines attack success rate with the potential impact of a successful attack, tested against categories including prompt injection, data exfiltration, and insecure code generation. The result is a sc…
The "What"Snyk is introducing Snyk Assist — an AI-powered support and guidance assistant available directly inside the Snyk UI.Snyk Assist answers product, setup, and troubleshooting questions in plain language, grounded in Snyk's own documentation, release notes, and support knowledge articles. It can also retrieve read-only information about your current organization and group, and open a suppor…
Snyk is rolling out a redesigned navigation experience! The classic sidebar — which listed every page across Tenant, Group, and Organization scopes at once — is replaced by a single breadcrumb bar at the top that lets users switch scope in one click via per-level drop-downs. The left sidebar is condensed to core areas only (Analytics, Inventory, Projects, Issues, Policies, Settings), with all sett…
We are pleased to announce Snyk CLI release, v1.1306.4This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Clearer error messages when the CLI cannot reach a configured proxy. Failures now report the proxy URL the CLI attempted to use, with credentials redacted, along with the…
We are pleased to announce Snyk CLI release, v1.1306.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Updates bundled dependencies to remediate known vulnerabilities, keeping the CLI current for teams with supply chain policies on the tools running in their pipelines.Fixed…
Snyk API & Web now supports NTLM v2 authentication for Web targets. Security teams can configure NTLM credentials (username, password, domain, workstation) directly in the target settings, enabling authenticated scans of Windows-authenticated applications without requiring separate tools.
Starting August 4, 2026, Snyk secrets scanner is generally available to help secure your entire SDLC against credential leaks.Stolen credentials remain a leading initial access vector in security breaches, and the rise of AI-generated code increases the risk of exposing sensitive data. You can now use Snyk secrets scanner to detect hardcoded credentials, API keys, and tokens across your repositori…
Until now, a developer could suppress a Snyk Code finding on their own — directly in the Web UI or IDE — with no review step. Suppression happened silently and unilaterally, leaving security teams without a gate on what got ignored.
COBOL support becomes generally available on August 17, 2026. Snyk Code brings SAST to your mainframe applications, scanning fixed-format COBOL across the integrations you already use, so mainframe code receives the same real-time, in-workflow security coverage as the rest of your stack. Detection is tuned with feedback from design-partner environments across large finance and mainframe estates.Wh…
This update is available on August 17, 2026. It broadens language and framework coverage, adds serverless and LangChain support for Python, and cuts false positives in C++ and C#.PythonLangChain support — Snyk Code covers applications that use LangChain, flagging unsafe handling of data flowing through the framework.Serverless support — Snyk Code covers Python applications running on AWS Lambda.Ne…
We are pleased to announce Snyk CLI release, v1.1306.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Improved authentication handling in the Snyk Language Server, which powers Snyk's IDE integrationsFixed vulnerabilities:SNYK-GOLANG-GOOGLEGOLANGORGGRPCINTERNALXDSRBAC-1817…
We are introducing Automatic Target Authentication Configuration for API & Web, an AI-driven feature that streamlines DAST authenticated scan setup.
We are pleased to announce Snyk CLI release, v1.1306.1This release contains fixes to ensure security. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Fixed vulnerabilities:CVE-2026-41907CVE-2026-13149CVE-2026-59869CVE-2026-59873CVE-2026-39244Release notes can be found here.If you have any questions, feel free to reach out t…
Extend Snyk Code's security rules with your own code. Add your custom functions to an existing rule so the engine understands your project's specific logic and returns more accurate findings.Start with custom sanitizers: register your in-house sanitizer functions so Snyk Code recognizes them as valid ways to clean data, and stops flagging the code paths your own security controls already protect.W…
We are pleased to announce the latest stable Snyk CLI release, v1.1306.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:DoctorAdds a new snyk doctor command, giving you a quick way to diagnose common CLI problems…
Snyk API & Web now provides native support for Bruno collections. You can import your collections directly into the platform to create API Targets without converting files to Postman collections or OpenAPI schemas first.
We've expanded Snyk Open Source coverage with improved scanning capabilities. These updates help you close security gaps and manage dependencies more effectively. Key improvements include new support for the uv package manager and enhanced Go scanning for private dependencies.uv SCM supportThe uv package manager is an emerging tool in the Python ecosystem. Following our earlier CLI release, uv is…
The July release expands Snyk Code coverage for C++ with several new rules and broader native C++ detection, improves detection for several popular Java libraries, and adds a new Insecure Transmission rule for JavaScript and TypeScript. These changes arrive with the July release on 13 July 2026What's changingNew rulesLog Forging, C++ (CWE-117, high): flags untrusted user input reaching a logging s…
On July 27, 2026, Snyk updates the default setting for issue alert emails to ensure every notification you receive is relevant to your work. These emails alert you to newly detected vulnerabilities and license violations.Summary of changesIf you have never manually configured your notification preferences, you stop receiving these emails after July 27, 2026. This update moves issue alert notificat…
We are pleased to announce Snyk CLI release, v1.1305.2.This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Bumped the Go runtime to version 1.26.4.Improved MCP logging and addressed security issues in the Snyk MCP Server.Fixed vulnerabilities: CVE-2026-44705CVE-2026-45570CVE-2…
This month on Snyk Learn, we’ve added new AI security lessons covering the attacks that target agentic systems: getting agents to run code they shouldn't, poisoning their memory to bend their reasoning, and exploiting the gaps where agents talk to each other!Security lessons[New][AI-Sec] Unexpected code execution (RCE) - tricking your agentic systems to execute code![New][AI-Sec] Memory and Contex…
A cluttered PR backlog slows everyone down. Following a successful Early Access, automatic closing of Open Source Fix PRs is now generally available. What's more, this feature will be turned on by default across all of our customers so your team spends less time triaging stale pull requests and more time shipping.Whether a developer manually applied a fix, removed the dependency, or a transitive u…
The upcoming improvements for our Snyk Code: June Update will be postponed from June 15 to June 22. We're running a final round of quality validation to make sure these updates deliver the most accurate results. These updates, including broader TLS and cryptographic detection for .NET and expanded PHP SQL injection coverage, will now go live on June 22.
We are thrilled to announce that the Prevention Report is now available in Early Access!Measuring the true impact of "shifting left" has traditionally been a challenge. We designed the Prevention report to give you clear, actionable visibility into the effectiveness of security adoption directly within your development lifecycle.This new report tracks the vulnerabilities developers proactively rem…