Blog Archive

Vulnerability Insights

CRLF injection found in popular Python dependency, urllib3

May 15, 2019

Open Source Security

JVM Ecosystem Survey 2019

May 14, 2019

Vulnerability Insights

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

May 6, 2019

Vulnerability Insights

Do you know how healthy your .NET dependencies are?

May 3, 2019

Open Source Security

How much do we really know about how packages behave on the npm registry?

April 22, 2019

Vulnerability Insights

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

April 15, 2019

Open Source Security

Securing Bitbucket Cloud with Snyk

April 4, 2019

Vulnerability Insights

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019

Open Source Security

81% believe developers should own security, but they aren’t well-equipped

February 26, 2019

Open Source Security

78% of vulnerabilities are found in indirect dependencies, making remediation complex

February 26, 2019

Open Source Security

88% increase in application library vulnerabilities over two years

February 26, 2019

Open Source Security

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

February 26, 2019

Open Source Security

Open source maintainers want to be secure, but 70% lack skills

February 26, 2019

Open Source Security

10 npm Security Best Practices

February 19, 2019

Vulnerability Insights

NumPy arbitrary code execution vulnerability

February 5, 2019

Open Source Security

Launching .NET support for GitHub, Bitbucket and GitLab

February 4, 2019

Vulnerability Insights

Severe security vulnerability in Bower’s zip archive extraction

January 31, 2019

Open Source Security

Monitoring open source packages at runtime - now in open beta

January 30, 2019

Open Source Security

Snyk CLI drops support for Node.js 4 (Argon)

January 24, 2019

Open Source Security

Finding open source vulnerabilities within the Bitbucket workflow

January 22, 2019

Open Source Security

Faster & improved tests for JavaScript lockfile based projects

December 10, 2018

Open Source Security

Introducing open source security runtime monitoring

November 12, 2018

Open Source Security

The State of Open Source Security Survey

November 6, 2018

Open Source Security

Over 10% of Python packages on PyPI are distributed without a license

September 18, 2018