Vulnerability InsightsWhy npm lockfiles can be a security blindspot for injecting malicious modulesSeptember 24, 2019
Open Source SecurityEverything you wanted to know about addressing security vulnerabilities in Linux-based containersSeptember 18, 2019
Vulnerability InsightsSequelize ORM npm library found vulnerable to SQL Injection attacksSeptember 11, 2019
Open Source SecurityUnique to the .NET ecosystem, 75% of the top twenty vulnerabilities have a high severity ratingJuly 25, 2019
Open Source SecurityRemote code execution, cross-site scripting, and denial of service vulnerabilities account for 2/3 of known vulnerabilities in .NET ecosystemJuly 25, 2019
Vulnerability InsightsConcerns of supply-chain attacks amplify as remote code execution was found in Ruby gem strong_passwordJuly 7, 2019
Vulnerability InsightsSnyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodashJuly 5, 2019
Open Source SecurityServerless is great, but what about the security of my AWS Lambda functions and their dependencies?July 3, 2019
Vulnerability InsightsA Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP clientMay 6, 2019