Tag

CVE

5 articles

Latest in CVE

Blogs

How Open Source Dependency and Repo Attacks Compromise DevOps Pipelines and How to Stay Safe

Modern applications rely on open source components for up to 90% of their code, creating a vast attack surface dominated by inhemalicious supply chain injections. High-profile incidents like Log4j and the sabotage of colors.js hig…

May 11, 20263 min

All CVE Articles

Showing 1–5 of 5

Jul02

Blogs

Open-Source Software Community Riled by Yet Another CVE

Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers.

3 min

May17

Blogs

Standardize: It’s Not the Where. Sometimes it’s Not the What

In our industry’s attempts to follow best practices that marketers assure us we must have or we are going to lose to our biggest competitor … No, wait, we’ll lose to that startup n…

3 min

Nov29

Blogs

WhiteSource Report Finds NPM Vulnerabilities Fixed Fast

WhiteSource today published a report that found most of the vulnerabilities that affect node package managers (NPMs), widely employed to deploy JavaScript applications, are address…

3 min

Apr17

Blogs

ClickShare Vulnerabilities May Have Been Patched, But They Mask a Much Bigger Problem

I think we can all recall a time in recent memory where, in a meeting or at a conference, someone has had issues with presentation technology. It happens so often that there is alm…

3 min