%term

Identify, prioritize, and fix vulnerabilities with Reachable Vulnerabilities for GitHub

Jan 28, 2021 By Brian Vermeer In Snyk

Imagine you are a Java programmer and that you just decided you want to use Snyk Open Source scanning to help you find security problems in your third party libraries. Good call! However, after connecting your repository to the Snyk Open Source scanner, you find out that you have ten or maybe even 50 vulnerabilities in the packages you depend on. The major question is: where do I start?

Read Post

Snyk

Read more about Identify, prioritize, and fix vulnerabilities with Reachable Vulnerabilities for GitHub

Java XML Security: How to prevent External Entity (XXE) Injection attacks

Jan 12, 2021 By Snyk In Snyk

Is Java XML parsing safe? What is an XML External Entity Vulnerability in Java? How do XXE attacks work in Java? How to do Java XML External Entity Prevention? Make sure to subscribe so you don't miss new content!

View Video

Snyk

Read more about Java XML Security: How to prevent External Entity (XXE) Injection attacks

Java Crypto Catchup

Nov 16, 2020 By Mansi Sheth In Veracode

In 2017, we started a blog series talking about how to securely implement a crypto-system in java. How to Get Started Using Java Cryptography Securely touches upon the basics of Java crypto, followed by posts around various crypto primitives Cryptographically Secure Pseudo-Random Number Generator (CSPRNG), Encryption/Decryption, and Message Digests. We also released a Java Crypto Module for easier dockerization of injectable modules exposing Crypto services via an API.

Read Post