logo

Python Poetry support with Snyk CLI

ID: 2caf7ae0-d9fe-5949-be7a-0b05af4b9faa

STIX ID: report--2caf7ae0-d9fe-5949-be7a-0b05af4b9faa

Feed Name: Snyk Blog

Threat Score
55/100

Date Published: 2020-11-13

Date Updated: 2026-09-15

...
...

This article demonstrates integrating the Poetry Python package manager with Snyk to scan projects for vulnerable dependencies; the author creates a test project, installs known-vulnerable libraries (python-docx with an XXE/local-file-inclusion flaw and pyyaml 3.13 with insecure deserialization leading to possible remote code execution), and shows that Snyk detects these high-severity issues using the pyproject.toml and poetry.lock files.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.