Brian Vermeer
7,323 viewsSecuring Symmetric Encryption Algorithms in Java
Encryption is converting readable data or plaintext into unreadable data or ciphertext, ensuring that even if encrypted data is intercepted, …
Brian Vermeer
54 articles
350,071 viewsBrian Vermeer
7,323 views
Brian Vermeer
7,741 viewsHandling security vulnerabilities in Spring Boot
Keeping your dependencies in check is crucial to ensure that your Spring Boot projects run smoothly and remain resilient in the face of …
Brian Vermeer
7,177 viewsUsing JLink to create smaller Docker images for Spring Boot apps
An in-depth exploration of utilizing JLink to optimize Docker image sizes, enhancing application security and performance.
Brian Vermeer
8,536 viewsSnakeYaml 2.0: Solving the unsafe deserialization vulnerability
In December of last year, we reported CVE-2022-1471 to you. This unsafe deserialization problem could easily lead to arbitrary code …
Brian Vermeer
5,743 viewsPreventing Cross-Site Scripting (XSS) in Java with Snyk Code
By taking a proactive approach to XSS prevention and using the right resources and tools, developers can help ensure the security and …
Brian Vermeer
7,275 viewsMitigating Path Traversal Vulnerabilities in Java
Path traversal vulnerabilities are a serious threat to Java web applications, amongst the top security issues Snyk finds in Java code.
Brian Vermeer
6,788 viewsHow to create SBOMs in Java with Maven and Gradle
Java is a compiled language, so you should create an SBOM whenever you build a release version of your application. Find out more here!
Brian Vermeer
6,724 viewsUnsafe Deserialization Vulnerability in SnakeYaml
org.yaml:snakeyaml package is widely used in the Java ecosystem, in part because it is packaged by default in the spring-boot-starter.
7,240 viewsFoojay Podcast #7: Security in Java -- what do we need to know?
We invited Java security experts to dive into the fascinating world of secure coding and detecting vulnerabilities in your Java …
Brian Vermeer
6,809 viewsCVE-2022-42889: Apache Commons Text (Text4Shell) Vulnerability
Resolve this issue by upgrading to commons-text version 1.10 (or later), which disables the prefixes URL, DNS, and script by default.