Brian Vermeer
8,536 viewsSnakeYaml 2.0: Solving the unsafe deserialization vulnerability
In December of last year, we reported CVE-2022-1471 to you. This unsafe deserialization problem could easily lead to arbitrary code …
Category
Security
Brian Vermeer
8,536 views
Shai Almog
5,206 viewsUnderstanding Security Vulnerabilities: Preventing Attacks
What are the common vulnerabilities we need to be aware of? How do they look & how can we better protect ourselves from these common …
Brian Vermeer
5,743 viewsPreventing Cross-Site Scripting (XSS) in Java with Snyk Code
By taking a proactive approach to XSS prevention and using the right resources and tools, developers can help ensure the security and …
Geertjan Wielenga
6,217 viewsState of Java Survey
Do you ever wonder what OpenJDK distributions and what Java versions your peers are using? What Java versions?
Marit van Dijk
14,074 viewsAnalyzing dependencies in IntelliJ IDEA
Let's look at analyzing dependencies in IntelliJ IDEA. Where does your application get a specific version of a library, show conflicts, etc.
Marit van Dijk
10,847 viewsUsing Bots to Keep Dependencies Updated
Did you know bots can automatically create pull requests to keep dependencies secure and up to date? Find out here!
Erik Costlow
2,989 viewsJava Security: Log4J, the SecurityManager, and Funding
A demonstration of log4j exploits, which defenses people tried, and which worked. We'll cover how groups responded effectively to patch to …
Brian Vermeer
7,275 viewsMitigating Path Traversal Vulnerabilities in Java
Path traversal vulnerabilities are a serious threat to Java web applications, amongst the top security issues Snyk finds in Java code.
Theresa Mammarella
8,482 viewsPredicting Secure Java Projects on Maven Central
Next time you’re considering a new Java library, look for the Sonatype Safety Rating on Maven Central to aid in your decision making.
Brian Vermeer
6,788 viewsHow to create SBOMs in Java with Maven and Gradle
Java is a compiled language, so you should create an SBOM whenever you build a release version of your application. Find out more here!