CVE-2020-7652: Synk Broker

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.

Affected products

• Synk Broker: before 4.80.0 (fixed in 4.80.0)

Published 2020-05-29. Last modified 2026-06-17.