devsecops Archives - Security Report

Where did these mysterious PrismJS npm versions come from? 4 min read

Where did these mysterious PrismJS npm versions come from?

Ax Sharma April 15, 2021

Shedding light on mysterious 9000.0.x versions of PrismJS that had left everyone puzzled in 2015, and weren't removed until 2019.... Read More

Git remote code execution vulnerability patched, upgrade now 1 min read

Git remote code execution vulnerability patched, upgrade now

Ax Sharma March 10, 2021

The Git project has released patches for a severe remote code execution (RCE) vulnerability, CVE-2021-21300 that can be exploited by attackers when their malicious repos are cloned.... Read More

laptop compute displaying command prompt

4 free DevSecOps tools for staying on top of vulnerabilities 2 min read

4 free DevSecOps tools for staying on top of vulnerabilities

Ax Sharma November 16, 2020

Here are some DevSecOps tools that you can leverage to stay on top of software vulnerabilities at no cost.... Read More

Sonatype releases Advanced Development Pack with next-gen DevSecOps intelligence 3 min read

Sonatype releases Advanced Development Pack with next-gen DevSecOps intelligence

Security Report News October 7, 2020

Fulton, MD – Sonatype, the company that scales DevOps through open source governance and software supply chain automation, today unveils its breakthrough Advanced Development Pack that... Read More