megachangelog
Snyk logo

Snyk Changelog

Snyk — Security, Compliance product updates and releases, tracked on megachangelog.

ComplianceSecurityOfficial changelog ↗RSS
ImprovementOctober 2026

Snyk Code October update: improved analysis and more findings

Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.

code-analysissastsecurityvulnerability-detectionmulti-language
Feature1.1308.0

Snyk CLI v1.1308.0 released

Introducing HTML report generation for test commands, experimental agent-scan improvements with risk indicators, and substantial reliability fixes for Maven, Gradle, and .NET projects to prevent stack overflows and scanning failures.

clihtml-reportsgradlemavendotnet
Feature

ADS installer now available as packaged binary

The Agent Supply Chain Security installer now ships as signed macOS .pkg and Windows .msi packages, eliminating the need for custom scripts and MDM integration. The installer registers scheduled jobs automatically for independent scan execution.

installerdeploymentmacoswindowsagent
Feature1.1307.4

Snyk CLI v1.1307.4 — Studio integration and snyk fix improvements

Snyk CLI v1.1307.4 adds experimental studio command for AI coding tool integration, new filtering flags for snyk fix --agentic mode, improved fix change handling, and fixes an issue where scan type flags could be silently dropped on unified test API.

clistudiofixesai-toolsscanning
Announcement2026.08.17

Snyk Code Priority Score Updated: Fix Example Factor Removed

Fix example scoring factor was removed from Snyk Code priority scores on August 17, 2026, causing scores to drop by up to 200 points for affected findings. This change aligns priority scoring more closely with actual code risk rather than content availability.

scoringcode-analysisprioritypolicy
Announcement

Snyk for Jira migrated to Atlassian Forge

Snyk for Jira has been rebuilt on Atlassian Forge ahead of Atlassian Connect end-of-support in December 2026. All functionality is preserved and existing installations will be automatically migrated without any action required.

jiraintegrationsmigrationatlassian
Feature

Evo MCP Server now available

Snyk's Evo tool now integrates with MCP clients like Claude, Codex, and Cursor, allowing users to query their AI assets, visualize connections, review policies, and manage policy violations directly from their agent. Users can discover AI assets across code, developer machines, and pentest targets without leaving their workflow.

mcpaiagentpolicyintegration
Improvement1.1307.3

Snyk CLI v1.1307.3

Snyk CLI v1.1307.3 includes bug fixes and improvements for policy file handling, multi-project scanning, and JAR manifest detection, plus security patches for three CVEs.

clibug-fixessecuritypolicyscanning
Feature

Container: Go standard library vulnerability reporting

Snyk Container will automatically report vulnerabilities found in the Go standard library for all container images built from Go binaries. The stdlib dependency is now included in the dependency graph versioned to the Go release used for the build, with automatic detection enabled for all organizations starting October 7, 2026.

containergosecurityvulnerabilitydependencies
Feature

Custom CA Certificate Support

Snyk API and Web now allow you to upload your organization's internal Certificate Authority so that certificates it issues are trusted during scans. This prevents false positives and increases scan accuracy for enterprises with internal CAs.

securityapicertificatestrustenterprise
Security1.1307.2

Snyk CLI v1.1307.2

This release removes an unused experimental feature and fixes CVE-2026-84445. Users should upgrade to the latest version to benefit from these improvements and security fixes.

clisecurityvulnerabilityrelease
Announcement1.1307.1

Snyk CLI v1.1307.1 released

Snyk CLI v1.1307.1 includes bug fixes and improvements across error reporting, JSON output fields, policy file handling, pipeline reliability, debug logging, and container scans. The release also addresses multiple security vulnerabilities.

clisecurityfixesjson-outputcontainer
Feature

Snyk Projects now stay in sync with repository content

Snyk now automatically keeps your Projects synchronized with repository changes. When files are added, moved, or deleted in monitored branches, Snyk automatically creates or deactivates corresponding Projects, eliminating the need for manual re-imports.

repositoryprojectsautomationsyncmonitoring
Announcement1.1307.0

Announcing Snyk CLI v1.1307.0

Snyk CLI v1.1307.0 introduces secrets test exclusions, container image provenance attestations by default, offline .NET/NuGet analysis, experimental agent command space for AI coding agents, and multiple reliability and performance fixes including support for pnpm v11, Gradle 7.4–8.2 crash fixes, and improved handling of special characters in exclusion rules.

clisecretscontainerdotnetagent
Breaking2026.08.18

Organization-scoped access in Evo

Evo data access is now limited to the Snyk Organizations a user can read, leveraging existing Organization hierarchy without requiring migration. Tenant Viewer now grants scoped read access, Tenant Member no longer grants Evo access, and Organization names appear alongside repositories to distinguish duplicates across Organizations.

evoaccess-controlorganizationssecuritypermissions
ImprovementSeptember 2026

Snyk Code September Update

Snyk Code now analyzes template files (Jinja2, Razor, FreeMarker, and others) with data flow tracking, extends Java framework and library support (Spring Security OAuth2, Apache CXF, OkHttp, and more), improves detection coverage across six languages, and analyzes committed files matched by .gitignore rules to align with Git semantics.

code-analysissastjavatemplate-enginescoverage
Feature

New model risk scoring for AI models in Evo

Snyk Evo introduces a rebuilt model risk score (0–1,000) that combines attack success rate with potential impact, replacing the previous Risk Index. The new scoring evaluates AI models against prompt injection, data exfiltration, and insecure code generation, maps to industry frameworks like OWASP LLM Top 10 and NIST AI standards, and includes default and custom policies for risk triage.

ai-modelsrisk-scoringsecurityevocompliance
Feature

Snyk Assist — AI-powered support and guidance in Snyk UI

Snyk Assist is a new AI-powered assistant built into the Snyk UI that answers product, setup, and troubleshooting questions based on Snyk's documentation and support knowledge. It can retrieve organization information, open support cases, and look up vulnerabilities without leaving the conversation.

aiassistantsupportuitroubleshooting
Improvement

Unified Navigation, Navigation Search and Dark Mode

Snyk's UI has been redesigned with a new top breadcrumb navigation for scope switching, a condensed left sidebar focused on core areas, a dark mode option, and command palette search (Ctrl+K) for quick page access.

uinavigationdark-modeux
Improvement1.1306.4

Snyk CLI v1.1306.4 released

This release improves proxy error messaging with redacted credentials and updated error codes for easier CI/network troubleshooting, and includes embedded runtime updates that patch six high-severity CVEs and additional OpenSSL security fixes.

clisecurityimprovementsruntimeproxy
Security1.1306.3

Snyk CLI v1.1306.3 — Security fixes

This release patches known vulnerabilities in bundled dependencies (SNYK-JS-SHESCAPE-18319522 and CVE-2026-69152) to keep the CLI current with supply chain security policies.

securityclivulnerabilitiesdependencies
Feature

NTLM Authentication in Snyk API & Web

Snyk API and Web now support NTLM v2 authentication for Web targets, allowing security teams to configure NTLM credentials directly in target settings to perform authenticated scans of Windows-authenticated applications.

apiauthenticationwebsecuritywindows
Announcement2026.08.04

Snyk secrets scanner reaches general availability

Snyk secrets scanner is now generally available to detect and prevent hardcoded credentials, API keys, and tokens across repositories, with machine learning-driven detection that works for both human-written and AI-generated code. This helps protect your entire software development lifecycle against credential leaks and breaches.

securitysecretscredentialsdetectionsdlc
Feature

Governed ignores with Ignore Approval Workflow

Snyk Code findings can now be suppressed through an Ignore Approval Workflow that requires review, preventing developers from silently ignoring vulnerabilities without security team oversight.

snyk-codegovernancesecurityworkflow
FeatureAugust 17, 2026

COBOL support for Snyk Code now generally available

Snyk Code adds general availability SAST support for COBOL, enabling mainframe application scanning across CLI, IDE, and SCM integrations. Fixed-format COBOL is now scanned automatically alongside other languages with real-time security feedback.

cobolsastmainframesecurityga
ImprovementAugust 17, 2026

Snyk Code August Update

Snyk Code now supports LangChain and serverless Python applications on AWS Lambda, adds Spring Data coverage for Java with improved framework recognition, and reduces false positives in C++ and C# analysis. Fix examples have been removed from the Web UI and SARIF output to streamline remediation workflows.

sastpythonjavaframework-supportaccuracy
Improvement1.1306.2

Snyk CLI v1.1306.2 – Improved authentication and fixes

This release improves authentication handling in the Snyk Language Server for IDE integrations and fixes vulnerabilities. Users should upgrade to benefit from these improvements and enhanced security.

cliauthenticationidesecuritylanguage-server
Security1.1306.1

Snyk CLI v1.1306.1 Security Release

This release fixes five CVE vulnerabilities to improve security. Users should upgrade to the latest version to apply these critical security patches.

clisecurityvulnerabilitiescve
Feature

Rule Extensions for Snyk Code is now generally available

Rule Extensions for Snyk Code enables users to extend security rules with custom code, including custom sanitizers, to improve accuracy of findings based on project-specific logic. Users can define and manage extensions through the UI or REST API, preview changes before applying, and manage them programmatically at scale.

sastcode-securitycustomizationapienterprise
Announcement1.1306.0

Snyk CLI v1.1306.0 Release

Snyk CLI v1.1306.0 introduces a new doctor command for diagnosing CLI issues, improves container scanning for Java and .NET dependencies, enables the breakability evaluation tool by default in the MCP Server, and includes multiple bug fixes for Gradle, Swift Package Manager, sbt, and Yarn workspace projects.

clicontainerscascanninggradle
Feature

Support for Bruno Collections in API Targets

Snyk API & Web now natively supports Bruno collections, allowing you to import collections directly into the platform to create API Targets without needing to convert files to Postman collections or OpenAPI schemas.

apibrunocollectionsimport
Feature

Snyk Open Source ecosystem coverage expanded

Snyk Open Source now supports the uv package manager for Python with SCM integrations and PR checks, alongside improved Go scanning for private dependencies via module proxies and Broker connections. These enhancements help close security gaps and eliminate blind spots in dependency graphs.

open-sourcedependency-scanningpythongopackage-manager
Announcement2026-07-27

Issue alert emails: updating the default

Snyk is changing issue alert emails to an opt-in model on July 27, 2026. If you have not manually configured notification preferences, you will stop receiving these emails; existing preferences are preserved. You can re-enable alerts at any time through Account, Organization, or Group Settings.

notificationsalertspolicysettings
Security1.1305.2

Snyk CLI v1.1305.2

CLI release with Go runtime bump to 1.26.4, improved MCP logging with security fixes, and patches for three security vulnerabilities.

clisecuritygo-runtimemcp
Announcement

Snyk Learn: New AI security lessons and expanded language support

Snyk Learn added new lessons covering AI security attacks on agentic systems, including code execution, memory poisoning, and inter-agent communication vulnerabilities. Language coverage was also expanded to Python, Rust, and Ruby for OWASP Top 10 lessons.

ai-securitylearningtrainingowaspagent-security
Announcement

Automatically Close Obsolete Open Source Fix PRs

Snyk now automatically closes outdated open source fix PRs when issues are resolved through manual fixes, dependency removals, or transitive updates, with detailed comments explaining the closure. The feature is enabled by default for all organizations and can be configured or disabled from settings.

fix-prsautomationopen-sourcega
AnnouncementJune Update

Rescheduling Snyk Code June Update to June 22

The Snyk Code June Update, including TLS and cryptographic detection improvements for .NET and expanded PHP SQL injection coverage, has been postponed from June 15 to June 22 for final quality validation.

announcementsastcode-scanningsds
Announcement

Prevention Report now available in Early Access

The Prevention Report provides visibility into vulnerabilities developers remediate proactively during creation in Snyk Code and Secrets, tracking security adoption effectiveness across IDE plugins, CLI, and Snyk Studio. Data is captured automatically as teams work to shift security left.

reportingsecuritycode-scanningsecretsdeveloper-experience
Security1.1305.1

Snyk CLI v1.1305.1 released

This release improves rate-limit handling by respecting the X-RateLimit-Reset header for more reliable scans in high-volume environments, and fixes three security vulnerabilities including one in IaC extensions.

clirate-limitingsecurityvulnerabilityreliability
Announcement

New Snyk User Docs site structure

Snyk User Docs have been redesigned and reorganized into six clearly defined site sections including Discover Snyk, Platform administration, Scan/fix/prevent, Developer tools, Agent security, and Data and governance, plus dedicated Getting started and Implementation guides to improve navigation and onboarding.

documentationsite-structureorganizationonboarding
FeatureJune 2026

Snyk Code: June Update

Snyk Code expands security detection for .NET (C# and VB) with improved TLS vulnerability and cryptographic algorithm analysis across standard libraries and third-party packages like BouncyCastle, plus enhanced PHP coverage for SQL injection through database-access wrapper classes.

dotnetsecuritycryptographyphpsast
FeatureMay 26, 2025

Agent Fix: New Agentic Workflow & Claude Model Upgrade

Snyk upgraded Agent Fix to use Claude models with enhanced agentic workflows, including agentic retries that detect and correct deviations from security best practices, dynamic few-shot prompting for secure examples, and full language coverage across all Snyk Code languages. Performance improved significantly with Sonnet and Opus models showing 10+ percentage point gains on Snyk's Golden Test benchmark.

aisecuritycode-remediationclaudeperformance
Feature

OWASP Top 10:2025 Support in Snyk API & Web

Snyk API & Web now supports the OWASP Top 10:2025 standard for compliance reporting, allowing users to generate reports against either the 2025 or 2021 versions.

apicomplianceowaspreporting
Announcement1.1305.0

Announcing Snyk CLI v1.1305.0

Snyk CLI v1.1305.0 introduces the --allow-incomplete-sbom flag for SBOM generation, parallel dependency requests in container monitoring, an experimental breakability evaluation tool for MCP, static Linux binaries, and fixes for npm package aliases, Python .whl file parsing, and dependency vulnerabilities.

clisbomcontainerperformancelinux
Announcement

Snyk Learn: New AI security lessons and refreshed IDE content

Snyk Learn added new lessons on AI secure development, prompt injection, and AI agents, plus refreshed content for IDE integration with developer and admin-focused workflows. New coverage for Python, Rust, and Ruby in OWASP Top 10 path, and a feedback button for users to suggest topics.

learningai-securitytrainingideeducation
Feature

Snyk Studio: Asynchronous Hooks-Based Guardrails for AI Agents

Snyk Studio replaces traditional rules-based guardrails with a new asynchronous, hooks-based architecture that provides deterministic security scans, zero-latency background execution, and improved context window efficiency. The approach now supports multiple Agentic Development Environments with an automated installation script for enterprise deployment.

guardrailsai-agentssecuritystudioagentic-development
Feature

New Analytics Overview Widgets

New widgets added to the analytics overview dashboard display key performance indicators from Snyk Studio and pull request check reports, providing better visibility into your security program.

analyticsdashboardvisibilitysecurityreporting
Security1.1304.2

Snyk CLI v1.1304.2 — Security fixes and Studio improvements

This release addresses multiple vulnerabilities in Go SDK dependencies and adds missing tool annotations to the Snyk Studio MCP server. Users should upgrade to benefit from these security and stability improvements.

clisecuritygolangvulnerabilitiesstudio
Improvement

Improved zero-day report filtering and visibility

Enhanced zero-day report usability with expanded filter options, individual incident breakdown in trend charts, and a new toggle to filter between open and resolved issues in the side panel.

securityzero-dayreportinguifiltering
Feature

Expanded Container JVM Support

Snyk Container now detects vulnerabilities in Java versions beyond OpenJDK 8, expanding from previously limited unmanaged Java container software detection.

containerjvmjavavulnerability-scanningsecurity
Announcement1.1304.1

Snyk CLI v1.1304.1 release

This release improves error handling during maintenance windows with better exit codes, adds Windows x86 and macOS x86 architecture support to Agent Scan, introduces an issues ignore option for CI flexibility, and patches two security vulnerabilities.

cliagent-scanerror-handlingsecuritymacos
ImprovementMay 2026

Snyk Code - Early May 2026 Update

Snyk Code is improving scanning precision across supported languages by tuning Path Traversal severity, adding Apache Camel framework coverage for Java/Kotlin/Groovy, enhancing .snyk exclude patterns with full glob semantics, and reducing false positives in Python archive extraction detection. These changes reduce noise while maintaining detection of genuine security risks.

sastaccuracypythonjavasecurity-tuning
Feature

Identify CISA KEV vulnerabilities for compliance

Snyk added a new Known Exploited Vulnerabilities (KEV) filter that helps you identify and manage risks tracked by CISA as actively exploited in the wild. This filter is available across all pages where issue filters are available for better security backlog management.

securityvulnerabilitiescompliancecisafiltering
Announcement

Announcing Repo Monitor Configuration

Snyk introduces Repo Monitor Configuration, a new Group-level feature that enables centralized management of repository coverage and monitoring configurations across your entire Snyk Group from the Inventory page. This includes centralized asset monitoring, bulk import, on-demand retesting, and actionable error resolution.

inventorymonitoringgroup-managementrepositoriesconfiguration
Feature

Repo Content Sync in Early Access

Repository Content Sync automatically synchronizes your SCM repositories with Snyk, detecting new manifest files and creating projects while deactivating projects when files are deleted. This ensures your Snyk security posture always reflects your current codebase.

repositoriesscmautomationsyncenterprise
Announcement

New stable versions of Snyk IDE plugins

Released new stable versions across all Snyk IDE plugins (VSCode v2.31.0, JetBrains v2.21.0, Eclipse v3.9.0, Visual Studio v2.9.0) with improved stability, reliability fixes including authentication race conditions and CLI fallback handling, and expanded JetBrains compatibility.

idevscodejetbrainseclipsevisual-studio
Feature

Native GraphQL Scanning for Snyk API & Web

Snyk API & Web now supports GraphQL as an API target type with security tests for queries and mutations. Schema ingestion is available via URL, file upload, or direct introspection endpoint fetching, with new authentication settings to support GraphQL targets.

dastgraphqlapiscanningsecurity
Feature

Test target configuration for smoother scans

Added a new Test configuration option to verify target accessibility and settings before running DAST scans. The feature provides real-time feedback on connectivity, authentication, WAF interference, schema validity, and extra hosts.

dastapitestingconfiguration
Feature

Native uv support for Snyk CLI

Snyk now provides native support for the uv Python package manager across the CLI, IDE, and GitHub Actions, enabling high-performance dependency scanning without compromising security.

pythonuvclisecurity-scanningpackage-manager
Announcement1.1304.0

Snyk CLI v1.1304.0 Released

Snyk CLI v1.1304.0 brings new AI governance features with the snyk aibom test command, enhanced Red Teaming insights, improved package health checks in MCP, extended Java runtime binary scanning support, and significant reliability and performance improvements across scanning and dependency resolution.

cliai-governancesecurityperformancecontainer

Sign up to see more

60 more changes from Snyk. Sign up to read the whole changelog.

Sign up free

GitHub or email — no card needed.