Tag

open source vulnerabilities

8 articles

Latest in open source vulnerabilities

Blogs

From Static Scans to Runtime Awareness: The Next Phase of Software Supply Chain Security

A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages can execute harmful code during installation, often…

Oct 19, 20263 min

All open source vulnerabilities Articles

Showing 1–8 of 8

Aug31

Broadcom Launches Trusted Artifact Service for Spring Framework

Broadcom launches TrueSource Trusted Artifacts to provide hardened Spring dependencies, secure open source packages and automated vulnerability remediation.

3 min

Aug25

Blogs

Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework

Sonatype says 91 Spring vulnerabilities affecting more than 209,000 software components highlight how AI is accelerating vulnerability discovery and creating a new patching challen…

3 min

Mar04

Blogs

Chainguard Expands Repository to Add More Secure Open Source Libraries

Learn how Chainguard is strengthening software supply chains by expanding its secure repository of Java, JavaScript, and Python libraries, enabling DevOps teams to access component…

3 min

Nov16

Blogs

DevSecOps Implementation: Source Composition Analysis

This is the second installment in this series on DevSecOps. Read the first installment, on Static Analysis, here. One of the better additions to security in recent years is source…

3 min

May19

Blogs

5 Ways to Detect Application Security Vulnerabilities Sooner to Reduce Costs and Risk

Security testing has always been an important step in the application development process. Yet, traditional measures often occur too late in the process to effectively find and fix…

3 min

Apr20

Blogs