Blog Archive

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

Snyk Named a 2018 Gartner Cool Vendor in Application and Data Security

JVM Ecosystem Survey 2018

Skyscanner fixed projects and gained visibility into their open source vulnerability exposure.

Local Type Inference Cheat Sheet for Java 10 and beyond!

JavaScript and Node.js Security – The Common Pitfalls

Attacking an FTP Client: MGETting more than you bargained for

Snyk is Now Integrated with Chrome’s Lighthouse

Tailoring your notifications

DigitalOcean: Fixing a critical Ruby Gem vulnerability within a day of disclosure

How Comic Relief’s developers used Snyk to automate security and boost productivity as part of their Digital Transformation.

Snyk $7M Series A - and a huge thanks!

Introducing groups – a new way to manage your teams in Snyk

Suppressing issues in Snyk

Python Mocking 101: Fake it before you make it

What’s a known vulnerability?

We’ll know DevSecOps has won once it’s dead

Where do security patches come from?

What do open source maintainers know about security?

npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

Don’t build security tools, build developer tools instead

Using the Snyk API to find and fix vulnerabilities

Announcing Snyk for .NET, Go and PHP

Bower is dead, long live npm. And Yarn. And webpack.