Blog Archive

Vulnerability Insights

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

April 15, 2019

Vulnerability Insights

Enriched content on Snyk’s publicly available vulnerability database

April 8, 2019

Vulnerability Insights

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019

Vulnerability Insights

Snyking in - regular expression denial of service vulnerability exploit in the ms package

March 13, 2019

Vulnerability Insights

Top ten Docker images contain over 8000 vulnerable paths

March 7, 2019

Vulnerability Insights

Snyking in - Directory traversal vulnerability exploit in the st package

February 25, 2019

Vulnerability Insights

A serious security flaw in runC can result in root privilege escalation in Docker and Kubernetes

February 13, 2019

Vulnerability Insights

NumPy arbitrary code execution vulnerability

February 5, 2019

Vulnerability Insights

Severe security vulnerability in Bower’s zip archive extraction

January 31, 2019

Vulnerability Insights

Critical Arbitrary Code Execution Vulnerability Found in Kubernetes

December 20, 2018

Vulnerability Insights

Report Shows the Equifax Breach was "Entirely Preventable"

December 18, 2018

Vulnerability Insights

A post-mortem of the malicious event-stream backdoor

December 6, 2018

Vulnerability Insights

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

November 27, 2018

Vulnerability Insights

Behind the disclosure: the Zip Slip vulnerability

August 15, 2018

Vulnerability Insights

How to crash an email server with a single email

August 1, 2018

Vulnerability Insights

Zip Slip Vulnerability Cheat Sheet

June 28, 2018

Vulnerability Insights

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

June 5, 2018

Vulnerability Insights

Attacking an FTP Client: MGETting more than you bargained for

April 4, 2018

Vulnerability Insights

What’s a known vulnerability?

February 6, 2018

Vulnerability Insights

Where do security patches come from?

January 25, 2018

Vulnerability Insights

npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

January 10, 2018