4276 articles
4276 ARTICLES
On July 2nd, 2019, Snyk published a high severity prototype pollution security vulnerability (CVE-2019-10744) affecting all versions of lodash, as the result of an on-going analysis lead by the Snyk security research team.
To emphasize the complexity of tracking a function’s dependencies, in a recent State of Open Source Security report 2019 Snyk showed that security vulnerabilities in indirect dependencies account for 78% of overall vulnerabilities.
Snyk has partnered with O’Reilly to offer a new book
Prisma 2 Preview introduced a type-safe database client and declarative migrations to modernize database workflows for application developers.
Cryptocurrency wallet developer Komodo has been in the news recently as the most recent victim of an attempted cryptocurrency attack by malicious code injection via npm dependencies.
Fugue’s visualization feature enables DevOps teams, security engineers, and compliance analysts to auto-generate diagrams of their cloud environments.
Here’s the first installment of our bi-weekly updates on what’s new in Snyk.
June 4th is a historic date: it’s the date that the millionth package was indexed into the npm registry. npm is a package manager for JavaScript packages. The core component of npm is its public registry, hosting JavaScript packages that can be accessed by the npm client to build JavaScript applications.
10 serverless security best practices for securing your serverless and cloud functions, from managing secrets, to data security, function isolation, least privileges and many more!
![Java Top 10 Security Vulnerabilities Disclosed [2019 - List]](https://stithello.blob.core.windows.net/ithello-online-images/d2d14ec2-e670-4c4a-b5bf-6d4aa2681bf7.webp)
In this post, we’ll take a look at the vulnerabilities that have been found in the top ten Java libraries picked by OverOps, and focus on three of them in more depth.
We are pretty excited to share that last week Snyk was recognized as a ‘Next European Unicorn’ at the 2019 Vivatech Awards.