Python Poetry support with Snyk CLI
ID: 2caf7ae0-d9fe-5949-be7a-0b05af4b9faa
STIX ID: report--2caf7ae0-d9fe-5949-be7a-0b05af4b9faa
Feed Name: Snyk Blog
Threat Score
This article demonstrates integrating the Poetry Python package manager with Snyk to scan projects for vulnerable dependencies; the author creates a test project, installs known-vulnerable libraries (python-docx with an XXE/local-file-inclusion flaw and pyyaml 3.13 with insecure deserialization leading to possible remote code execution), and shows that Snyk detects these high-severity issues using the pyproject.toml and poetry.lock files.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
