Snyk — Security, Compliance product updates and releases, tracked on megachangelog.
Snyk CLI v1.1307.0 introduces secrets test exclusions, container image provenance attestations by default, offline .NET/NuGet analysis, experimental agent command space for AI coding agents, and multiple reliability and performance fixes including support for pnpm v11, Gradle 7.4–8.2 crash fixes, and improved handling of special characters in exclusion rules.
Evo data access is now limited to the Snyk Organizations a user can read, leveraging existing Organization hierarchy without requiring migration. Tenant Viewer now grants scoped read access, Tenant Member no longer grants Evo access, and Organization names appear alongside repositories to distinguish duplicates across Organizations.
Snyk Code now analyzes template files (Jinja2, Razor, FreeMarker, and others) with data flow tracking, extends Java framework and library support (Spring Security OAuth2, Apache CXF, OkHttp, and more), improves detection coverage across six languages, and analyzes committed files matched by .gitignore rules to align with Git semantics.
Snyk Evo introduces a rebuilt model risk score (0–1,000) that combines attack success rate with potential impact, replacing the previous Risk Index. The new scoring evaluates AI models against prompt injection, data exfiltration, and insecure code generation, maps to industry frameworks like OWASP LLM Top 10 and NIST AI standards, and includes default and custom policies for risk triage.
Snyk's UI has been redesigned with a new top breadcrumb navigation for scope switching, a condensed left sidebar focused on core areas, a dark mode option, and command palette search (Ctrl+K) for quick page access.
This release improves proxy error messaging with redacted credentials and updated error codes for easier CI/network troubleshooting, and includes embedded runtime updates that patch six high-severity CVEs and additional OpenSSL security fixes.
This release patches known vulnerabilities in bundled dependencies (SNYK-JS-SHESCAPE-18319522 and CVE-2026-69152) to keep the CLI current with supply chain security policies.
Snyk API and Web now support NTLM v2 authentication for Web targets, allowing security teams to configure NTLM credentials directly in target settings to perform authenticated scans of Windows-authenticated applications.
Snyk secrets scanner is now generally available to detect and prevent hardcoded credentials, API keys, and tokens across repositories, with machine learning-driven detection that works for both human-written and AI-generated code. This helps protect your entire software development lifecycle against credential leaks and breaches.
Snyk Code findings can now be suppressed through an Ignore Approval Workflow that requires review, preventing developers from silently ignoring vulnerabilities without security team oversight.
Snyk Code adds general availability SAST support for COBOL, enabling mainframe application scanning across CLI, IDE, and SCM integrations. Fixed-format COBOL is now scanned automatically alongside other languages with real-time security feedback.
Snyk Code now supports LangChain and serverless Python applications on AWS Lambda, adds Spring Data coverage for Java with improved framework recognition, and reduces false positives in C++ and C# analysis. Fix examples have been removed from the Web UI and SARIF output to streamline remediation workflows.
This release improves authentication handling in the Snyk Language Server for IDE integrations and fixes vulnerabilities. Users should upgrade to benefit from these improvements and enhanced security.
Snyk now offers AI-driven automatic target authentication configuration for DAST authenticated scans, streamlining the setup process for API and web application testing.
This release fixes five CVE vulnerabilities to improve security. Users should upgrade to the latest version to apply these critical security patches.
Rule Extensions for Snyk Code enables users to extend security rules with custom code, including custom sanitizers, to improve accuracy of findings based on project-specific logic. Users can define and manage extensions through the UI or REST API, preview changes before applying, and manage them programmatically at scale.
Snyk CLI v1.1306.0 introduces a new doctor command for diagnosing CLI issues, improves container scanning for Java and .NET dependencies, enables the breakability evaluation tool by default in the MCP Server, and includes multiple bug fixes for Gradle, Swift Package Manager, sbt, and Yarn workspace projects.
Snyk API & Web now natively supports Bruno collections, allowing you to import collections directly into the platform to create API Targets without needing to convert files to Postman collections or OpenAPI schemas.
Snyk Open Source now supports the uv package manager for Python with SCM integrations and PR checks, alongside improved Go scanning for private dependencies via module proxies and Broker connections. These enhancements help close security gaps and eliminate blind spots in dependency graphs.
Snyk Code July release expands C++ security detection with new rules for log forging, privilege management, authorization, and TLS configuration, adds JavaScript/TypeScript coverage for insecure transmission, and improves detection for popular Java libraries including Azure SDK, Logback, Kafka, and Jackson.
Snyk is changing issue alert emails to an opt-in model on July 27, 2026. If you have not manually configured notification preferences, you will stop receiving these emails; existing preferences are preserved. You can re-enable alerts at any time through Account, Organization, or Group Settings.
CLI release with Go runtime bump to 1.26.4, improved MCP logging with security fixes, and patches for three security vulnerabilities.
Snyk Learn added new lessons covering AI security attacks on agentic systems, including code execution, memory poisoning, and inter-agent communication vulnerabilities. Language coverage was also expanded to Python, Rust, and Ruby for OWASP Top 10 lessons.
Snyk now automatically closes outdated open source fix PRs when issues are resolved through manual fixes, dependency removals, or transitive updates, with detailed comments explaining the closure. The feature is enabled by default for all organizations and can be configured or disabled from settings.
The Snyk Code June Update, including TLS and cryptographic detection improvements for .NET and expanded PHP SQL injection coverage, has been postponed from June 15 to June 22 for final quality validation.
The Prevention Report provides visibility into vulnerabilities developers remediate proactively during creation in Snyk Code and Secrets, tracking security adoption effectiveness across IDE plugins, CLI, and Snyk Studio. Data is captured automatically as teams work to shift security left.
This release improves rate-limit handling by respecting the X-RateLimit-Reset header for more reliable scans in high-volume environments, and fixes three security vulnerabilities including one in IaC extensions.
Snyk User Docs have been redesigned and reorganized into six clearly defined site sections including Discover Snyk, Platform administration, Scan/fix/prevent, Developer tools, Agent security, and Data and governance, plus dedicated Getting started and Implementation guides to improve navigation and onboarding.
Snyk Code expands security detection for .NET (C# and VB) with improved TLS vulnerability and cryptographic algorithm analysis across standard libraries and third-party packages like BouncyCastle, plus enhanced PHP coverage for SQL injection through database-access wrapper classes.
Snyk upgraded Agent Fix to use Claude models with enhanced agentic workflows, including agentic retries that detect and correct deviations from security best practices, dynamic few-shot prompting for secure examples, and full language coverage across all Snyk Code languages. Performance improved significantly with Sonnet and Opus models showing 10+ percentage point gains on Snyk's Golden Test benchmark.
Snyk API & Web now supports the OWASP Top 10:2025 standard for compliance reporting, allowing users to generate reports against either the 2025 or 2021 versions.
Snyk CLI v1.1305.0 introduces the --allow-incomplete-sbom flag for SBOM generation, parallel dependency requests in container monitoring, an experimental breakability evaluation tool for MCP, static Linux binaries, and fixes for npm package aliases, Python .whl file parsing, and dependency vulnerabilities.
Improved the Download CSV feature to offer greater flexibility when exporting data directly from the Snyk API and Web interface.
Snyk Learn added new lessons on AI secure development, prompt injection, and AI agents, plus refreshed content for IDE integration with developer and admin-focused workflows. New coverage for Python, Rust, and Ruby in OWASP Top 10 path, and a feedback button for users to suggest topics.
Snyk Studio replaces traditional rules-based guardrails with a new asynchronous, hooks-based architecture that provides deterministic security scans, zero-latency background execution, and improved context window efficiency. The approach now supports multiple Agentic Development Environments with an automated installation script for enterprise deployment.
New widgets added to the analytics overview dashboard display key performance indicators from Snyk Studio and pull request check reports, providing better visibility into your security program.
This release addresses multiple vulnerabilities in Go SDK dependencies and adds missing tool annotations to the Snyk Studio MCP server. Users should upgrade to benefit from these security and stability improvements.
Enhanced zero-day report usability with expanded filter options, individual incident breakdown in trend charts, and a new toggle to filter between open and resolved issues in the side panel.
Snyk Container now detects vulnerabilities in Java versions beyond OpenJDK 8, expanding from previously limited unmanaged Java container software detection.
This release improves error handling during maintenance windows with better exit codes, adds Windows x86 and macOS x86 architecture support to Agent Scan, introduces an issues ignore option for CI flexibility, and patches two security vulnerabilities.
Snyk Code is improving scanning precision across supported languages by tuning Path Traversal severity, adding Apache Camel framework coverage for Java/Kotlin/Groovy, enhancing .snyk exclude patterns with full glob semantics, and reducing false positives in Python archive extraction detection. These changes reduce noise while maintaining detection of genuine security risks.
Snyk added a new Known Exploited Vulnerabilities (KEV) filter that helps you identify and manage risks tracked by CISA as actively exploited in the wild. This filter is available across all pages where issue filters are available for better security backlog management.
Snyk introduces Repo Monitor Configuration, a new Group-level feature that enables centralized management of repository coverage and monitoring configurations across your entire Snyk Group from the Inventory page. This includes centralized asset monitoring, bulk import, on-demand retesting, and actionable error resolution.
Repository Content Sync automatically synchronizes your SCM repositories with Snyk, detecting new manifest files and creating projects while deactivating projects when files are deleted. This ensures your Snyk security posture always reflects your current codebase.
Released new stable versions across all Snyk IDE plugins (VSCode v2.31.0, JetBrains v2.21.0, Eclipse v3.9.0, Visual Studio v2.9.0) with improved stability, reliability fixes including authentication race conditions and CLI fallback handling, and expanded JetBrains compatibility.
Snyk API & Web now supports GraphQL as an API target type with security tests for queries and mutations. Schema ingestion is available via URL, file upload, or direct introspection endpoint fetching, with new authentication settings to support GraphQL targets.
Added a new Test configuration option to verify target accessibility and settings before running DAST scans. The feature provides real-time feedback on connectivity, authentication, WAF interference, schema validity, and extra hosts.
Snyk now provides native support for the uv Python package manager across the CLI, IDE, and GitHub Actions, enabling high-performance dependency scanning without compromising security.
Snyk CLI v1.1304.0 brings new AI governance features with the snyk aibom test command, enhanced Red Teaming insights, improved package health checks in MCP, extended Java runtime binary scanning support, and significant reliability and performance improvements across scanning and dependency resolution.
46 more changes from Snyk. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.