Blog Archive

Open Source Security

Using the Snyk Vulnerability Database to find projects for The Big Fix

March 30, 2022

Vulnerability Insights

Protestware is trending in open source: 4 different types and their impact

March 22, 2022

Vulnerability Insights

dompdf security alert: RCE vulnerability found in popular PHP PDF library

March 18, 2022

Open Source Security

Build a software bill of materials (SBOM) for open source supply chain security

March 14, 2022

Open Source Security

Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters

February 28, 2022

Vulnerability Insights

Join The Big Fix: a 24-hour livestream dedicated to fixing security vulnerabilities in your projects

February 21, 2022

Open Source Security

Using the Snyk Vulnerability database to identify projects for The Big Fix

February 16, 2022

Vulnerability Insights

Teaming up with Sysdig to deliver developer and runtime Kubernetes security

February 16, 2022

Open Source Security

Case study: Python RCE vulnerability in Celery

February 15, 2022

Open Source Security

SAST and SCA: Better together with Snyk

February 10, 2022

Vulnerability Insights

Log4Shell remediation with Snyk by the numbers

February 5, 2022

Vulnerability Insights

Stranger Danger: Live hack of how a Log4Shell exploit works

January 25, 2022

Vulnerability Insights

Open source maintainer pulls the plug on npm packages colors and faker, now what?

January 9, 2022

Vulnerability Insights

FTC highlights the importance of securing Log4j and software supply chain

January 7, 2022

Open Source Security

Developer security resolutions for 2022

January 5, 2022

Vulnerability Insights

Log4Shell webinar: What you need to know

January 5, 2022

Open Source Security

Securing a DevOps pipeline with Snyk, Bitbucket, and AWS

January 4, 2022

Vulnerability Insights

New Log4j 2.17.1 fixes CVE-2021-44832 remote code execution (but it’s not as bad as it sounds)

December 29, 2021

Open Source Security

It takes a community: Responding to open source criticism post-Log4Shell

December 24, 2021

Open Source Security

Snyk Open Source in 2021: A year of innovation

December 21, 2021

Vulnerability Insights

Snyk makes it easier to fix Log4Shell with extended free scans

December 21, 2021

Vulnerability Insights

Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

December 18, 2021

Vulnerability Insights

Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI

December 18, 2021

Vulnerability Insights

Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution

December 17, 2021