megachangelog
Security1.1305.1

Snyk CLI v1.1305.1 released

This release improves rate-limit handling by respecting the X-RateLimit-Reset header for more reliable scans in high-volume environments, and fixes three security vulnerabilities including one in IaC extensions.

We are pleased to announce Snyk CLI release, v1.1305.1

This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.

This update includes the following:

  • Improved rate-limit handling: the CLI now respects the X-RateLimit-Reset header when it is rate limited by the API, so retries wait the correct amount of time. This improves the reliability of scans in high-volume and CI/CD environments.

  • Fixed vulnerabilities:

    • CVE-2026-39827

    • CVE-2026-39831

    • CVE-2026-33186 (IaC extensions)

If you have any questions, feel free to reach out to the Snyk support team. We encourage everyone to upgrade to the latest version to take advantage of these improvements.

clirate-limitingsecurityvulnerabilityreliability

Source: original entry ↗

More from Snyk

Follow Snyk to get its new changes in your feed and email digest.

ImprovementOctober 2026

Snyk Code October update: improved analysis and more findings

Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.

code-analysissastsecurityvulnerability-detectionmulti-language
Feature1.1308.0

Snyk CLI v1.1308.0 released

Introducing HTML report generation for test commands, experimental agent-scan improvements with risk indicators, and substantial reliability fixes for Maven, Gradle, and .NET projects to prevent stack overflows and scanning failures.

clihtml-reportsgradlemavendotnet
Feature

ADS installer now available as packaged binary

The Agent Supply Chain Security installer now ships as signed macOS .pkg and Windows .msi packages, eliminating the need for custom scripts and MDM integration. The installer registers scheduled jobs automatically for independent scan execution.

installerdeploymentmacoswindowsagent
See all Snyk changes →