Opensourcesecurity

SnykSec for Snyk

Nov 2

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

#opensourcesecurity

3 min read

SnykSec for Snyk

Nov 15

Understanding command injection vulnerabilities in Go

#engineering #devsecops #opensourcesecurity #go

9

1

8 min read

SnykSec for Snyk

Oct 4

The mysterious supply chain concern of string-width-cjs npm package

#opensourcesecurity #supplychainsecurity #javascript #node

7 min read

SnykSec for Snyk

Aug 31

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

#applicationsecurity #opensourcesecurity #java

4 min read

SnykSec for Snyk

Sep 28

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

#containersecurity #opensourcesecurity #docker #scm

15

5 min read

SnykSec for Snyk

Sep 11

Abusing Ubuntu 24.04 features for root privilege escalation

#containersecurity #opensourcesecurity #securitylabs

2

24 min read

SnykSec for Snyk

Aug 15

Vulnerabilities in NodeJS C/C++ add-on extensions

#securitylabs #codesecurity #opensourcesecurity

1

12 min read

SnykSec for Snyk

Jun 27

Polyfill supply chain attack embeds malware in JavaScript CDN assets

#applicationsecurity #opensourcesecurity #javascript

210

6

5 min read

SnykSec for Snyk

Jun 28

How to secure a REST API?

#applicationsecurity #codesecurity #opensourcesecurity

2

11 min read

SnykSec for Snyk

May 23

Preventing broken access control in express Node.js applications

#codesecurity #opensourcesecurity #javascript #node

5

12 min read

SnykSec for Snyk

May 22

How to secure Python Flask applications

#applicationsecurity #opensourcesecurity #python

27

17 min read

SnykSec for Snyk

Apr 18

How to install Java on macOS

#applicationsecurity #containersecurity #opensourcesecurity #java

1

12 min read

SnykSec for Snyk

May 16

Symmetric vs. asymmetric encryption: Practical Python examples

#applicationsecurity #codesecurity #opensourcesecurity #python

3

16 min read

SnykSec for Snyk

May 9

The ultimate guide to creating a secure Python package

#opensourcesecurity #engineering #python #pycharm

17

3

15 min read

SnykSec for Snyk

Apr 19

Building an npm package compatible with ESM and CJS in 2024

#engineering #opensourcesecurity #javascript #node

24

4

4 min read

SnykSec for Snyk

Apr 9

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

#codesecurity #opensourcesecurity #go #node

2

4 min read

SnykSec for Snyk

Mar 13

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

#opensourcesecurity #python #ruby #javascript

4

1

8 min read

SnykSec for Snyk

Feb 21

Preventing server-side request forgery in Node.js applications

#codesecurity #opensourcesecurity #javascript #node

6

8 min read

SnykSec for Snyk

Feb 6

10 GitHub Security Best Practices

#codesecurity #devsecops #applicationsecurity #opensourcesecurity

3

14 min read

SnykSec for Snyk

Jan 26

7 tips to become a successful bug bounty hunter

#codesecurity #opensourcesecurity

18

1

5 min read

SnykSec for Snyk

Jan 19

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

#opensourcesecurity #python

6

5 min read

SnykSec for Snyk

Nov 30 '23

Handling security vulnerabilities in Spring Boot

#applicationsecurity #opensourcesecurity #java

5

2

6 min read

SnykSec for Snyk

Nov 1 '23

Dependency injection in Python

#opensourcesecurity #engineering #python

4

12 min read

SnykSec for Snyk

Oct 31 '23

The art of conditional rendering: Tips and tricks for React and Next.js developers

#engineering #opensourcesecurity

8

2

11 min read

SnykSec for Snyk

Oct 12 '23

How to update cURL

#devsecops #engineering #opensourcesecurity #vulnerabilityinsights

7

8 min read

SnykSec for Snyk

Sep 29 '23

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

#containersecurity #vulnerabilityinsights #opensourcesecurity #docker

1

9 min read

SnykSec for Snyk

Aug 30 '23

How to implement SSL/TLS pinning in Node.js

#codesecurity #opensourcesecurity #javascript #node

4

9 min read

SnykSec for Snyk

Aug 24 '23

Streamline dependency updates with Mergify and Snyk

#applicationsecurity #opensourcesecurity

1

7 min read

SnykSec for Snyk

Aug 10 '23

.NET developers alert: Moq NuGET package exfiltrates user emails from git

#applicationsecurity #opensourcesecurity #dotnet

7

4 min read

SnykSec for Snyk

Jun 30 '23

The importance of verifying webhook signatures

#codesecurity #opensourcesecurity #javascript #node

8 min read

SnykSec for Snyk

Jul 20 '23

Finding and fixing insecure direct object references in Python

#applicationsecurity #codesecurity #opensourcesecurity #python

1

6 min read

SnykSec for Snyk

Jul 12 '23

Session management security: Best practices for protecting user sessions

#codesecurity #opensourcesecurity #javascript

4

11 min read

SnykSec for Snyk

Jun 29 '23

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

#applicationsecurity #opensourcesecurity #javascript #node

5 min read

SnykSec for Snyk

Jun 22 '23

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

#opensourcesecurity #java

3

5 min read

SnykSec for Snyk

Jun 21 '23

Top 8 penetration testing tools

#containersecurity #devsecops #opensourcesecurity #kubernetes

7

2

5 min read

SnykSec for Snyk

Jun 21 '23

How to generate an SBOM for JavaScript and Node.js applications

#opensourcesecurity #compliance #javascript #node

4

11 min read

Liran Tal for Snyk

Sep 5 '22

The npm faker package and the unexpected demise of open source libraries

#dependencyhealth #opensource #opensourcesecurity

9

10 min read

DEV Community

# opensourcesecurity

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

Understanding command injection vulnerabilities in Go

The mysterious supply chain concern of string-width-cjs npm package

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

Abusing Ubuntu 24.04 features for root privilege escalation

Vulnerabilities in NodeJS C/C++ add-on extensions

Polyfill supply chain attack embeds malware in JavaScript CDN assets

How to secure a REST API?

Preventing broken access control in express Node.js applications

How to secure Python Flask applications

How to install Java on macOS

Symmetric vs. asymmetric encryption: Practical Python examples

The ultimate guide to creating a secure Python package

Building an npm package compatible with ESM and CJS in 2024

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

Preventing server-side request forgery in Node.js applications

10 GitHub Security Best Practices

7 tips to become a successful bug bounty hunter

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

Handling security vulnerabilities in Spring Boot

Dependency injection in Python

The art of conditional rendering: Tips and tricks for React and Next.js developers

How to update cURL

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

How to implement SSL/TLS pinning in Node.js

Streamline dependency updates with Mergify and Snyk

.NET developers alert: Moq NuGET package exfiltrates user emails from git

The importance of verifying webhook signatures

Finding and fixing insecure direct object references in Python

Session management security: Best practices for protecting user sessions

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

Top 8 penetration testing tools

How to generate an SBOM for JavaScript and Node.js applications

The npm faker package and the unexpected demise of open source libraries