Finding Vulnerabilities Isn’t Proving Exploit Chains 2026-10-07 60 True Why AI Agents Write Broken Access Control 2026-10-01 15 True Snyk Fetch the Flag CTF 2023 writeup: Off the SETUID 2026-09-15 50 True Why the Facebook outage and Twitch breach matter to business leaders 2026-09-15 70 True Data leak in the Netherlands: What developers should learn from this 2026-09-15 70 True When a vendor's breach becomes yours: lessons from the Klue incident 2026-06-23 70 True jqwik 1.10.0 Prompt Injection Explained 2026-06-02 35 True Miasma Attack Hits Red Hat npm Packages 2026-06-01 88 True Why Your “Skill Scanner” Is Just False Security (and Maybe Malware) 2026-02-11 55 True What you should know about PHP security vulnerabilities 2024-09-04 10 True How open source C++ code can introduce security risks 2022-08-22 20 True Controlling your server with a reverse shell attack 2022-08-10 20 True Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered 2021-12-18 55 True Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI 2021-12-18 75 True Log4j 2.15 vulnerability CVE-2021-45046 upgraded to a critical severity arbitrary code execution 2021-12-17 95 True How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint 2021-11-10 50 True Exploring extensions of dependency confusion attacks via npm package aliasing 2021-11-04 55 True JavaScript type confusion: Bypassed input validation (and how to remediate) 2021-11-03 35 True New Java 17 features for improved security and serialization 2021-10-21 15 True How Snyk Social Trends help you fix essential security vulnerabilities 2021-08-18 55 True Better Ruby Gemfile security: A step-by-step guide using Snyk 2021-08-10 30 True How I was hacking docker containers by exploiting ImageMagick vulnerabilities 2021-03-11 55 True Identify, prioritize, and fix vulnerabilities with Reachable Vulnerabilities for GitHub 2021-01-28 30 True Cache poisoning in popular open source packages 2021-01-18 50 True Typosquatting attacks 2021-01-12 65 True 2020 Q4 in review 2020-12-31 65 True 2020 Q3 in review 2020-12-30 65 True Golang security research 2020-12-22 50 True Serialization and deserialization in Java 2020-12-18 25 True Snyk Container and Linux security research 2020-12-14 15 True Detecting the ExternalIPs Kubernetes vulnerability in code 2020-12-10 55 True Kernel privilege escalation 2020-12-03 45 True Command injection: how it works, what are the risks, and how to prevent it 2020-11-25 60 True Buffer overflow in Chromium affecting multiple packages 2020-11-23 60 True Python Poetry support with Snyk CLI 2020-11-13 55 True Node.js security: lessons from the Node.js Security Working Group in triaging vulnerabilities 2020-11-06 15 True Regular Expression Denial of Service (REDoS) in UAParser.js 2020-10-26 55 True SourMint: iOS remote code execution, Android findings, and community response 2020-10-15 78 True How to deploy a Vue.js Jamstack application on Netlify with automatic security updates from Snyk 2020-09-24 45 True Arbitrary code execution in Grunt 2020-09-21 50 True SourMint: Malicious code, ad fraud, and data leak in iOS 2020-08-24 78 True Breaking out of message brokers 2020-08-05 70 True Arbitrary File Write via Archive Extraction (Zip Slip) in go-rpmutils 2020-07-20 55 True The State of Open Source Security 2020 2020-06-24 15 True Regular Expression Denial-of-Service in websocket-extensions 2020-06-22 30 True Mitigating clickJacking — the DevSecOps way! 2020-05-25 25 True Snyk vulnerability disclosure program: what’s going on behind the scenes? 2020-04-14 45 True Vulnerable Gradle plugin-publish plugin reveals sensitive information 2020-03-31 50 True Prototype pollution vulnerability in minimist npm package 2020-03-26 50 True What is a backdoor? Let’s build one with Node.js 2020-03-19 70 True 
