Snyk Blog

Open Source Security Archive

Showing 277 - 288 of 334 posts

wordpress-sync/snyk-default-blog-hero-image

Vulnerability Insights

Do you know how healthy your .NET dependencies are?

May 3, 2019

wordpress-sync/Malicious-code-found-in-npm-package-event-stream-downloaded-8-million-times-in-the-past-2.5-months-

Open Source Security

How much do we really know about how packages behave on the npm registry?

April 22, 2019

wordpress-sync/jQuery-Blog-2

Vulnerability Insights

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

April 15, 2019

wordpress-sync/Finding-open-source-vulnerabilities-within-the-Bitbucket-workflow-tumb

Open Source Security

Securing Bitbucket Cloud with Snyk

April 4, 2019

wordpress-sync/backdoor-discovered-in-Gem-Header-2

Vulnerability Insights

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019

wordpress-sync/the-state-op-open-source-6-small

Open Source Security

81% believe developers should own security, but they aren’t well-equipped

February 26, 2019

wordpress-sync/the-state-op-open-source-2-small

Open Source Security

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

February 26, 2019

wordpress-sync/the-state-op-open-source-2-small

Open Source Security

88% increase in application library vulnerabilities over two years

February 26, 2019

wordpress-sync/the-state-op-open-source-5-small

Open Source Security

Open source maintainers want to be secure, but 70% lack skills

February 26, 2019

wordpress-sync/the-state-of-open-source-small

Open Source Security

78% of vulnerabilities are found in indirect dependencies, making remediation complex

February 26, 2019

Open Source Security

10 npm Security Best Practices

February 19, 2019

wordpress-sync/NumPy-Arbitrary-Code-Execution-Vulnerability-small

Vulnerability Insights

NumPy arbitrary code execution vulnerability

February 5, 2019

123242528

Subscribe to our newsletter

Get all latest content from Snyk directly to your mailbox.

Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer’s toolkit.

Start freeBook a live demo

Product

What is Snyk?Snyk Code (SAST)Snyk Open Source (SCA)Snyk ContainerSnyk Infrastructure as CodeSnyk AppRisk (ASPM)Developer Security PlatformApplication securitySoftware supply chain securitySecure AI-generated code DeepCode AIPricingDeployment optionsIntegrationsIDE pluginsGit SecurityCI/CD pipelines securitySnyk CLISnyk LearnSnyk for JavaScript

Resources

DocumentationSnyk API DocsAPI statusDisclosed vulnerabilitiesSupport portal & FAQ’sBlogSecurity fundamentalsResources for security leadersResources for ethical hackersVulnerability DatabaseSnyk OSS AdvisorSnyk Top 10VideosCustomer resourcesSecurity Labs

Company

AboutCustomersCareersEventsSnyk for governmentSecurity & trustLegal termsPrivacyFor California residents: Do not sell my personal informationWebsite Terms of UseProcurement

Connect

Book a live demoContact usSupportReport a new vuln

Security

Application SecurityContainer SecuritySupply Chain SecurityJavaScript SecurityOpen Source SecurityAWS SecuritySecure SDLCSecurity postureSecure codingEthical HackingAI in cybersecurityCode CheckerPythonEnterprise CybersecurityJavaScriptSnyk With GitHubSnyk vs VeracodeSnyk vs Checkmarx

© 2024 Snyk Limited
Registered in England and Wales

logo-devseccon