Blog Archive

Best Practices for Continuous Vulnerability Management

October 29, 2024

Want to avoid a data breach? Employ secrets detection

September 16, 2024

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

April 8, 2024

The XZ backdoor CVE-2024-3094

March 31, 2024

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

February 6, 2024

Leaky Vessels: Docker and runc container breakout vulnerabilities (January 2024)

January 31, 2024

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

January 31, 2024

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

January 31, 2024

Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)

January 31, 2024

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

January 31, 2024

Weak Hash vulnerability discovered in crypto-js and crypto-es (CVE-2023-46233 & CVE-2023-46133)

October 25, 2023

Find and fix HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487

October 11, 2023

How to update cURL

October 11, 2023

How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

October 5, 2023

High severity vulnerability found in libcurl and curl (CVE-2023-38545)

October 4, 2023

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Introducing Snyk’s new Risk Score for risk-based prioritization

August 17, 2023

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

June 22, 2023

A quick primer on LDAP injection

June 1, 2023

Improved risk assessment with EPSS scores in Snyk

May 22, 2023

Snyk top 10 code vulnerabilities report

May 18, 2023