Blog Archive

Vulnerability Insights

Sequelize ORM npm library found vulnerable to SQL Injection attacks

September 11, 2019

Open Source Security

Open source security with O’Reilly author Guy Podjarny

August 30, 2019

Vulnerability Insights

Jackson Deserialization Vulnerability

August 21, 2019

Open Source Security

Securing Artifactory using Snyk

August 19, 2019

Open Source Security

Automating open source security scanning with Snyk and CircleCI

August 16, 2019

Open Source Security

Securing Go modules made easy (and accurately!)

August 7, 2019

Open Source Security

Staying ahead of security vulnerabilities with security patches

July 31, 2019

Open Source Security

Fix open source vulnerabilities directly from your Eclipse IDE

July 25, 2019

Open Source Security

.NET open source security insights

July 25, 2019

Open Source Security

Remote code execution, cross-site scripting, and denial of service vulnerabilities account for 2/3 of known vulnerabilities in .NET ecosystem

July 25, 2019

Open Source Security

Unique to the .NET ecosystem, 75% of the top twenty vulnerabilities have a high severity rating

July 25, 2019

Open Source Security

How to increase Serverless observability, monitoring and security

July 15, 2019

Vulnerability Insights

Concerns of supply-chain attacks amplify as remote code execution was found in Ruby gem strong_password

July 7, 2019

Vulnerability Insights

Snyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodash

July 5, 2019

Open Source Security

Serverless is great, but what about the security of my AWS Lambda functions and their dependencies?

July 3, 2019

Open Source Security

New O’Reilly Book: Securing Open Source Libraries by Guy Podjarny

July 2, 2019

Vulnerability Insights

Java Top 10 Security Vulnerabilities Disclosed [2019 - List]

May 27, 2019

Open Source Security

Dependency Health—assessing package risk with Snyk

May 16, 2019

Vulnerability Insights

CRLF injection found in popular Python dependency, urllib3

May 15, 2019

Open Source Security

JVM Ecosystem Survey 2019

May 14, 2019

Vulnerability Insights

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

May 6, 2019