Latest Posts

New Vulnerability in tree-kit: Prototype Pollution - CVE-2023-38894

Aug 16, 2023 By Roman Wagner In Code Intelligence

The maintainers have already released an update fixing the issue. Versions before 0.7.5 are affected and thus vulnerable to Prototype Pollution. We strongly recommend that impacted users upgrade to the newer version that includes the fixes, i.e., version 0.7.5 and above.We have found a new Prototype Pollution vulnerability in the JavaScript package tree-kit in all versions before 0.7.5. The maintainer of tree-kit has released an update that fixed the issue on 21 July 2023.

Read Post

Code Intelligence

Read more about New Vulnerability in tree-kit: Prototype Pollution - CVE-2023-38894

The Risks of AI-Generated Code

Aug 9, 2023 By Sergej Dechand In Code Intelligence

AI is fundamentally transforming how we write, test and deploy code. However, AI is not a new phenomenon, as the term was first coined in the 1950s. With the more recent release of ChatGPT, generative AI has taken a huge step forward in delivering this technology to the masses. Especially for development teams, this has enormous potential. Today, AI represents the biggest change since the adoption of cloud computing. However, using it to create code comes with its own risks.

Read Post

Code Intelligence

Read more about The Risks of AI-Generated Code

Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665

Jul 13, 2023 By Code Intelligence In Code Intelligence

As part of Code Intelligence's ongoing efforts to improve the security of open-source software it continuously tests open-source projects with its JavaScript fuzzing engine, Jazzer.js, in Google's OSS-Fuzz. Recently Code Intelligence uncovered a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665) using its newly integrated Prototype Pollution bug detector. The vulnerability puts affected applications at risks of remote code execution and denial of service attacks.

Read Post

Code Intelligence

Read more about Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665

26 AI Code Tools in 2024: Best AI Coding Assistant

Jul 13, 2023 By Alexander Thiam In Code Intelligence

Generative AI unleashed a whole series of new innovations and tools to the masses in 2023. From AI chatbots to image generators to AI coding assistants, there is just so much to consider, and there are more and more being launched every day. In this guide, we will look at how AI is changing the world of software development by showcasing 26 AI coding tools that are helping developers produce high-quality software more efficiently.

Read Post

Code Intelligence

Read more about 26 AI Code Tools in 2024: Best AI Coding Assistant

New Vulnerability in protobuf.js: Prototype Pollution - CVE-2023-36665

Jul 4, 2023 By Roman Wagner In Code Intelligence

We have found a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665). The maintainer of protobufjs has issued an update that fixed the issue on 27 June 2023. The vulnerability was discovered by Peter Samarin using Jazzer.js with our newly integrated Prototype Pollution bug detector. This finding emerged in part from our collaboration with Google's OSS-Fuzz and puts affected applications at risk of remote code execution and denial of service attacks.

Read Post

Code Intelligence

Read more about New Vulnerability in protobuf.js: Prototype Pollution - CVE-2023-36665

Code Intelligence to Host DevSecOps Talk on The Future of Productive Development; Self-Learning AI for a Secure Tomorrow

May 23, 2023 By Code Intelligence In Code Intelligence

This Virtual Talk Takes Place on June 6, Hosted by Code Intelligence CEO and Co-founder Sergej Dechand.

Read Post

Code Intelligence

Read more about Code Intelligence to Host DevSecOps Talk on The Future of Productive Development; Self-Learning AI for a Secure Tomorrow

5 Tips for Functional Testing in Java

May 9, 2023 By Josh Grant In Code Intelligence

Functional testing is a critical aspect of application development, and it plays an essential role in products being built within the Java ecosystem to ensure they meet their functional requirements and work as intended for the end user. As this method of testing is heavily based on validating “functionality” (i.e., “Does this application work the way we intend it to work?”), it is essential to utilize it throughout the development process.

Read Post

Code Intelligence

Read more about 5 Tips for Functional Testing in Java

Code Intelligence Finds Vulnerability in MySQL JDBC Driver - CVE-2023-21971

Apr 21, 2023 By Code Intelligence In Code Intelligence

Affected applications are at a higher risk of severe availability issues.

Read Post

Code Intelligence

Read more about Code Intelligence Finds Vulnerability in MySQL JDBC Driver - CVE-2023-21971

New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access

Apr 20, 2023 By Roman Wagner In Code Intelligence

We have found a new vulnerability in MySQL Connector/J (CVE-2023-21971). Oracle issued a critical path update that fixed the issue on April 18, 2023. The vulnerability was found as part of our collaboration with Google’s OSS-Fuzz.

Read Post