Blog Archive

Vulnerability Insights

Snyk’s Statement on the MITRE CVEs Program Funding Update

April 16, 2025

Vulnerability Insights

CVE-2025-29927 Authorization Bypass in Next.js Middleware

March 23, 2025

Vulnerability Insights

Reconstructing the TJ Actions Changed Files GitHub Actions Compromise

March 17, 2025

Open Source Security

Best practices for continuous vulnerability management

October 29, 2024

Application Security

Want to avoid a data breach? Employ secrets detection

September 16, 2024

Engineering

Exploiting HTTP/2 CONTINUATION frames for DoS attacks

April 8, 2024

Application Security

The XZ backdoor CVE-2024-3094

March 31, 2024

Application Security

Vulnerability vs Weakness: Understanding Key Differences in AppSec

November 17, 2023

Vulnerability Insights

Weak Hash vulnerability discovered in crypto-js and crypto-es (CVE-2023-46233 & CVE-2023-46133)

October 25, 2023

Vulnerability Insights

Find and fix HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487

October 11, 2023

Code Security

How to update cURL

October 11, 2023

Vulnerability Insights

How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

October 5, 2023

Vulnerability Insights

High severity vulnerability found in libcurl and curl (CVE-2023-38545)

October 4, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Application Security

Introducing Snyk’s new Risk Score for risk-based prioritization

August 17, 2023

Application Security

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

June 22, 2023

Application Security

A quick primer on LDAP injection

June 1, 2023

Container Security

Improved risk assessment with EPSS scores in Snyk

May 22, 2023

Code Security

Snyk top 10 code vulnerabilities report

May 18, 2023

Application Security

How to prevent XPath injection attacks

May 10, 2023

Cloud Security

Fix cloud security issues faster and at the source with Snyk IaC

April 4, 2023

Application Security

Snyk brings developer-first AppSec approach to C/C++

April 4, 2023

Application Security

Snyk achieves Red Hat Vulnerability Scanner Certification

April 3, 2023

Application Security

Data leak in the Netherlands: What developers should learn from this

March 31, 2023