Opensourcesecurity

SnykSec for Snyk

Dec 12

Ultralytics AI Pwn Request Supply Chain Attack

#codesecurity #devsecops #opensourcesecurity #supplychainsecurity

7 min read

SnykSec for Snyk

Nov 2

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

#opensourcesecurity

3 min read

SnykSec for Snyk

Nov 15

Understanding command injection vulnerabilities in Go

#engineering #devsecops #opensourcesecurity #go

11

1

8 min read

SnykSec for Snyk

Oct 4

The mysterious supply chain concern of string-width-cjs npm package

#opensourcesecurity #supplychainsecurity #javascript #node

7 min read

SnykSec for Snyk

Aug 31

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

#applicationsecurity #opensourcesecurity #java

4 min read

SnykSec for Snyk

Sep 28

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

#containersecurity #opensourcesecurity #docker #scm

15

5 min read

SnykSec for Snyk

Sep 11

Abusing Ubuntu 24.04 features for root privilege escalation

#containersecurity #opensourcesecurity #securitylabs

2

24 min read

SnykSec for Snyk

Aug 15

Vulnerabilities in NodeJS C/C++ add-on extensions

#securitylabs #codesecurity #opensourcesecurity

1

12 min read

SnykSec for Snyk

Jun 27

Polyfill supply chain attack embeds malware in JavaScript CDN assets

#applicationsecurity #opensourcesecurity #javascript

212

6

5 min read

SnykSec for Snyk

Jun 28

How to secure a REST API?

#applicationsecurity #codesecurity #opensourcesecurity

2

11 min read

SnykSec for Snyk

May 23

Preventing broken access control in express Node.js applications

#codesecurity #opensourcesecurity #javascript #node

5

12 min read

SnykSec for Snyk

May 22

How to secure Python Flask applications

#applicationsecurity #opensourcesecurity #python

27

17 min read

SnykSec for Snyk

Apr 18

How to install Java on macOS

#applicationsecurity #containersecurity #opensourcesecurity #java

1

12 min read

SnykSec for Snyk

May 16

Symmetric vs. asymmetric encryption: Practical Python examples

#applicationsecurity #codesecurity #opensourcesecurity #python

3

16 min read

SnykSec for Snyk

May 9

The ultimate guide to creating a secure Python package

#opensourcesecurity #engineering #python #pycharm

17

3

15 min read

SnykSec for Snyk

Apr 19

Building an npm package compatible with ESM and CJS in 2024

#engineering #opensourcesecurity #javascript #node

25

4

4 min read

SnykSec for Snyk

Apr 9

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

#codesecurity #opensourcesecurity #go #node

2

4 min read

SnykSec for Snyk

Mar 13

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

#opensourcesecurity #python #ruby #javascript

4

1

8 min read

SnykSec for Snyk

Feb 21

Preventing server-side request forgery in Node.js applications

#codesecurity #opensourcesecurity #javascript #node

6

8 min read

SnykSec for Snyk

Feb 6

10 GitHub Security Best Practices

#codesecurity #devsecops #applicationsecurity #opensourcesecurity

3

14 min read

SnykSec for Snyk

Jan 26

7 tips to become a successful bug bounty hunter

#codesecurity #opensourcesecurity

18

1

5 min read

SnykSec for Snyk

Jan 19

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

#opensourcesecurity #python

6

5 min read

SnykSec for Snyk

Nov 30 '23

Handling security vulnerabilities in Spring Boot

#applicationsecurity #opensourcesecurity #java

5

2

6 min read

SnykSec for Snyk

Nov 1 '23

Dependency injection in Python

#opensourcesecurity #engineering #python

4

12 min read

SnykSec for Snyk

Oct 31 '23

The art of conditional rendering: Tips and tricks for React and Next.js developers

#engineering #opensourcesecurity

8

2

11 min read

SnykSec for Snyk

Oct 12 '23

How to update cURL

#devsecops #engineering #opensourcesecurity #vulnerabilityinsights

7

8 min read

SnykSec for Snyk

Sep 29 '23

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

#containersecurity #vulnerabilityinsights #opensourcesecurity #docker

1

9 min read

SnykSec for Snyk

Aug 30 '23

How to implement SSL/TLS pinning in Node.js

#codesecurity #opensourcesecurity #javascript #node

4

9 min read

SnykSec for Snyk

Aug 24 '23

Streamline dependency updates with Mergify and Snyk

#applicationsecurity #opensourcesecurity

1

7 min read

SnykSec for Snyk

Aug 10 '23

.NET developers alert: Moq NuGET package exfiltrates user emails from git

#applicationsecurity #opensourcesecurity #dotnet

7

4 min read

SnykSec for Snyk

Jun 30 '23

The importance of verifying webhook signatures

#codesecurity #opensourcesecurity #javascript #node

8 min read

SnykSec for Snyk

Jul 20 '23

Finding and fixing insecure direct object references in Python

#applicationsecurity #codesecurity #opensourcesecurity #python

1

6 min read

SnykSec for Snyk

Jul 12 '23

Session management security: Best practices for protecting user sessions

#codesecurity #opensourcesecurity #javascript

4

11 min read

SnykSec for Snyk

Jun 29 '23

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

#applicationsecurity #opensourcesecurity #javascript #node

5 min read

SnykSec for Snyk

Jun 22 '23

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

#opensourcesecurity #java

3

5 min read

SnykSec for Snyk

Jun 21 '23

Top 8 penetration testing tools

#containersecurity #devsecops #opensourcesecurity #kubernetes

7

2

5 min read

SnykSec for Snyk

Jun 21 '23

How to generate an SBOM for JavaScript and Node.js applications

#opensourcesecurity #compliance #javascript #node

4

11 min read

Liran Tal for Snyk

Sep 5 '22

The npm faker package and the unexpected demise of open source libraries

#dependencyhealth #opensource #opensourcesecurity

9

10 min read

DEV Community

# opensourcesecurity

Ultralytics AI Pwn Request Supply Chain Attack

If you don’t know about HTTP Archive’s Web Almanac yet, you should!

Understanding command injection vulnerabilities in Go

The mysterious supply chain concern of string-width-cjs npm package

The persistent threat: Why major vulnerabilities like Log4Shell and Spring4Shell remain significant

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System

Abusing Ubuntu 24.04 features for root privilege escalation

Vulnerabilities in NodeJS C/C++ add-on extensions

Polyfill supply chain attack embeds malware in JavaScript CDN assets

How to secure a REST API?

Preventing broken access control in express Node.js applications

How to secure Python Flask applications

How to install Java on macOS

Symmetric vs. asymmetric encryption: Practical Python examples

The ultimate guide to creating a secure Python package

Building an npm package compatible with ESM and CJS in 2024

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

Preventing server-side request forgery in Node.js applications

10 GitHub Security Best Practices

7 tips to become a successful bug bounty hunter

Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)

Handling security vulnerabilities in Spring Boot

Dependency injection in Python

The art of conditional rendering: Tips and tricks for React and Next.js developers

How to update cURL

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

How to implement SSL/TLS pinning in Node.js

Streamline dependency updates with Mergify and Snyk

.NET developers alert: Moq NuGET package exfiltrates user emails from git

The importance of verifying webhook signatures

Finding and fixing insecure direct object references in Python

Session management security: Best practices for protecting user sessions

Using insecure npm package manager defaults to steal your macOS keyboard shortcuts

SnakeYaml 2.0: Solving the unsafe deserialization vulnerability

Top 8 penetration testing tools

How to generate an SBOM for JavaScript and Node.js applications

The npm faker package and the unexpected demise of open source libraries