Liran Tal

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

6 de maio de 2019

190,000 users affected by Docker Hub’s security breach. Now what?

29 de abril de 2019

How much do we really know about how packages behave on the npm registry?

22 de abril de 2019

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

15 de abril de 2019

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

4 de abril de 2019

Introducing experimental integrity policies to Node.js

21 de março de 2019

What is package lock json and how a lockfile works for yarn and npm packages?

14 de março de 2019

78% of vulnerabilities are found in indirect dependencies, making remediation complex

26 de fevereiro de 2019

88% increase in application library vulnerabilities over two years

26 de fevereiro de 2019

Open source maintainers want to be secure, but 70% lack skills

26 de fevereiro de 2019

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

26 de fevereiro de 2019

Top ten most popular docker images each contain at least 30 vulnerabilities

26 de fevereiro de 2019