Arbitrary File Read

snyk-broker is vulnerable to information disclosure. The vulnerability exists because it does not properly discard unused white-listed APIs, allowing a user with access to Snyk’s internal network to create symlinks to match white-listed paths.