Skip to main content

Security Labs

The Snyk Security Labs team leads high-impact research, paving the way for secure innovation in application development.

Our work has led to major CVEs in core container infrastructure, closed significant supply chain attack vectors in popular open source registries, and demonstrated novel attacks on emerging technologies.

Found a vulnerability? Or know of one missing from the Snyk Vulnerability Database? We’ll help you verify it, contact the maintainer, and assign a CVE for the issue.

article

In Localhost We Trust: Exploring Vulnerabilities in Cortex.cpp, Jan’s AI Engine

Read now

article

Don’t Get Too Comfortable: Hacking ComfyUI Through Custom Nodes

Read now

article

Hijacking OAUTH flows via Cookie Tossing

Read now

article

Remote Code Execution with Spring Boot 3.4.0 Properties

Read now

Experiments

Where AI security meets curiosity

Explore Projects from Snyk Labs

github-actions-scanner

JavaScript

Scans your Github Actions for security issues

Updated 3 days ago


73

8

0

snyk-cli-greybeard

Shell

A wrapper for Snyk CLI that transforms security scan results into grumpy, sarcastic commentary from an experienced security "greybeard" using OpenAI.

Updated 14 days ago


8

0

0

snyk-adversarial-inputs-to-image-classifiers

Python

Demonstrates and visualizes adversarial attacks against image classification models. The project implements several popular attack methods and provides detailed visualizations of the perturbations and their effects.

Updated 32 days ago


1

0

0