Log4Shell: Critical Log4j RCE Vulnerabilty -- Update to Version 2.15.0
On Dec.10, 2021, a new, critical Log4j vulnerability was disclosed: Log4Shell. All current versions of log4j2 up to 2.14.1 are vulnerable.
Brian Vermeer
54 articles
353,716 viewsNew Java 17 Features for Improved Security and Serialization
The Java 17 LTS release brings you significant improvements to prevent malicious deserialization in your java applications.
How Social Trends Help Me Fix Essential Vulnerabilities
Our research team found a correlation between socially trending vulnerabilities and the existence of exploits that can harm your …
Discussion: The State of Java 2021
A discussion with some great folks in the Java world about the highlights of the Snyk Java Ecosystem report and current developments in …
Why You Should Upgrade to Maven Version 3.8.1 Today or Very Soon
If you are still running on an old Maven version like 3.6.3 or below, you need to upgrade to version 3.8.1 because of security reasons.
Getting Started with Snyk for Secure Java Development
Learn how to begin with Snyk for secure Java development so that you too can be more secure from the get-go!
New JVM Ecosystem Report 2021 Has Arrived!
JVM Ecosystem Report 2021 presents the results of the largest annual survey on the state of the JVM ecosystem.
Learn All About Java Encryption and Hashing
What is a strong encryption algorithm today, might be a weak algorithm a year from now. Therefore, encryption needs to be reviewed …
Sanitize All Input! Sanitize All Input! Sanitize All Input!
Cross-site scripting (XSS) is a well-known issue and mostly utilized in JavaScript applications. However, Java is not immune to this!
Preventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.