Blog Archive

Code Security

Mitigating path traversal vulns in Java with Snyk Code

March 6, 2023

Container Security

API authentication vulnerability found in Snyk Kubernetes integration (CVE-2023-1065)

February 28, 2023

Application Security

Finding YAML Deserialization with Snyk Code

February 23, 2023

Open Source Security

The dangers of setattr: Avoiding Mass Assignment vulnerabilities in Python

February 15, 2023

Application Security

Prevent OWASP Top 10 vulns with new Snyk Learn learning path

January 17, 2023

Vulnerability Insights

Supply chain security incident at CircleCI: Rotate your secrets

January 7, 2023

Vulnerability Insights

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

December 14, 2022

Vulnerability Insights

Code injection vulnerabilities (CVSSv3 5.8) found in Snyk CLI and IDE plugins

November 30, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Potty Training

November 12, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Disposable Message

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: git-refs

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Not So Smart Fridge

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Roadrunner

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Logster

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Juggalo Central

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Treasure Trove

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Pay Attention

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Moongoose

November 10, 2022

Application Security

Fetch the Flag CTF 2022 writeup: File Explorer

November 9, 2022

Application Security

Fetch the Flag CTF 2022 writeup: Containers are ACE

November 9, 2022

Vulnerability Insights

Update: OpenSSL high severity vulnerabilities

November 3, 2022

Vulnerability Insights

New OpenSSL critical vulnerability: What you need to know

October 31, 2022

Vulnerability Insights

Understanding DNS attacks: Identifying and patching vulnerabilities

October 26, 2022

Vulnerability Insights

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

October 18, 2022