Blog Archive

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

Cheat sheet: 10 Bitbucket security best practices

Enriched content on Snyk’s publicly available vulnerability database

Securing Bitbucket Cloud with Snyk

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

Introducing experimental integrity policies to Node.js

Snyk joins the Continuous Delivery Foundation as a founding member.

What is package lock json and how a lockfile works for yarn and npm packages?

Snyking in - regular expression denial of service vulnerability exploit in the ms package

Snyk provides a critical security layer for CommunityBridge, a new Linux Foundation platform

Security Transformation and The Three Faces of DevSecOps

Celebrate International Women’s Day with Snyk

Top ten Docker images contain over 8000 vulnerable paths

Secure your build workflow on Bitbucket Pipes with Snyk

88% increase in application library vulnerabilities over two years

Top ten most popular docker images each contain at least 30 vulnerabilities

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

81% believe developers should own security, but they aren’t well-equipped

Open source maintainers want to be secure, but 70% lack skills

78% of vulnerabilities are found in indirect dependencies, making remediation complex

Snyking in - Directory traversal vulnerability exploit in the st package

Security in the Container Registry

So, you think your CI/CD environment is secure?

10 npm Security Best Practices