Vulnerabilityinsights

SnykSec for Snyk

Jul 17

Suspicious Maintainer Unveils Threads of npm Supply Chain Attack

#engineering #vulnerabilityinsights #javascript #node

2

8 min read

SnykSec for Snyk

Feb 2

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

#containersecurity #vulnerabilityinsights #kubernetes #docker

5

5 min read

SnykSec for Snyk

Feb 7

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

#vulnerabilityinsights #ccpp #docker #kubernetes

4

45 min read

SnykSec for Snyk

Feb 2

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

#containersecurity #vulnerabilityinsights #kubernetes #docker

4

5 min read

SnykSec for Snyk

Feb 1

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

#containersecurity #vulnerabilityinsights #kubernetes #docker

1

5 min read

SnykSec for Snyk

Oct 12 '23

How to update cURL

#devsecops #engineering #opensourcesecurity #vulnerabilityinsights

7

8 min read

SnykSec for Snyk

Oct 6 '23

How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

#vulnerabilityinsights

2

6 min read

SnykSec for Snyk

Sep 29 '23

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

#containersecurity #vulnerabilityinsights #opensourcesecurity #docker

1

9 min read

SnykSec for Snyk

Jun 21 '23

How to prevent XPath injection attacks

#applicationsecurity #codesecurity #vulnerabilityinsights #java

4

8 min read

SnykSec for Snyk

Jun 21 '23

A quick primer on LDAP injection

#applicationsecurity #vulnerabilityinsights

1

6 min read

DEV Community

# vulnerabilityinsights

Suspicious Maintainer Unveils Threads of npm Supply Chain Attack

Buildkit GRPC SecurityMode privilege check: Build-time container breakout (CVE-2024-23653)

Leaky Vessels deep dive: Escaping from Docker one syscall at a time

Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

Buildkit mount cache race: Build-time race condition container breakout (CVE-2024-23651)

How to update cURL

How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

How to prevent XPath injection attacks

A quick primer on LDAP injection