1.1308.4 (2026-11-04)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- iac: Fixes a panic in
snyk iac testwhen an ARM template contains a property with a null value. (fbae7febd) - maven: Fixes
--include-component-metadatadropping thedistribution:urllabel for every Maven dependency when using Maven 3.10. (c783feecc) - language server: Bug fixes for Snyk Language Server used by the Snyk IDE plugins. (ef0db2c0b)
- deps: Updates dependencies to fix vulnerabilities:
- Updates the Open Policy Agent library used by
snyk iac testto address CVE-2025-46569 (126998855) - Updates
moby/buildkitto 0.31.2 to address CVE-2026-15788 and CVE-2026-61711 (130ecc217) - Updates
klauspost/compressto 1.20.2 andgo-jose/v4to 4.1.6 to address CVE-2026-116591 and CVE-2026-116587 (df49f1bd4) - Updates
golang.org/x/netto 0.62.0 to address CVE-2026-78661 (9857f314c)
- Updates the Open Policy Agent library used by