Snyk incident

Snyk CLI Degradation

Minor Resolved View vendor source →

Snyk experienced a minor incident on January 21, 2026 affecting Snyk Container and Snyk Container and 1 more component, lasting 2d. The incident has been resolved; the full update timeline is below.

Started
Jan 21, 2026, 08:21 AM UTC
Resolved
Jan 23, 2026, 09:08 AM UTC
Duration
2d
Detected by Pingoru
Jan 21, 2026, 08:21 AM UTC

Affected components

Snyk ContainerSnyk ContainerSnyk ContainerSnyk ContainerSnyk ContainerSnyk Open SourceSnyk Open SourceSnyk Open SourceSnyk Open SourceSnyk Open Source

Update timeline

  1. investigating Jan 21, 2026, 08:21 AM UTC

    Our Engineers are investigating the degradation affecting the Snyk CLI. Some customers may receive the error: packageURL validation failed with go.mod replace directive (SNYK-CLI-0000) when initiating CLI Tests for their GO Projects. This affects Snyk CLI version 1.1302.0. As a workaround, we recommend rolling back to a previous version of the CLI. The Snyk Incident Response has been invoked, and our investigations are underway.

  2. identified Jan 21, 2026, 08:45 AM UTC

    We have identified the root cause of the error and are now working on a fix.

  3. identified Jan 21, 2026, 11:44 AM UTC

    We have identified a solution and are preparing to deploy this as a hotfix. We will update you again once the hotfix has been released.

  4. identified Jan 21, 2026, 03:37 PM UTC

    As an immediate workaround, we recommend reverting to a CLI version prior to 1.1302.0. A hotfix addressing this issue is expected to be released tomorrow, 22nd January.

  5. monitoring Jan 23, 2026, 07:22 AM UTC

    The hotfix has now been released and is included in our latest stable Snyk CLI release: v1.1302.1. We recommend that affected customers upgrade their CLI to restore impacted services. We will continue to monitor services to ensure ongoing stability.

  6. resolved Jan 23, 2026, 09:08 AM UTC

    Affected customers can restore service by upgrading to the latest stable Snyk CLI release: v1.1302.1. The Snyk Incident Response has now been stood down.