security vulnerabilities Posts

[Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing](/content/blog/signal-over-noise-reachability-analysis-is-the-reality-check-sca-has-been-missing "Internal link to Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing resource"/index.html)

Read More

[pac4j CVE-2026-29000: New Critical Java Vulnerability](/content/blog/pac4j-cve-2026-29000-sonatype-finds-19-additional-packages "Internal link to pac4j CVE-2026-29000: New Critical Java Vulnerability resource"/index.html)

Read More

[Modern Vulnerability Management in the Age of AI](/content/blog/modern-vulnerability-management-in-the-age-of-ai "Internal link to Modern Vulnerability Management in the Age of AI resource"/index.html)

Read More

[Years-Old Apache Struts2 Vulnerability Downloaded 387K+ Times in the Past Week](/content/blog/years-old-apache-struts2-vulnerability-downloaded-325k-times-in-the-past-week "Internal link to Years-Old Apache Struts2 Vulnerability Downloaded 387K+ Times in the Past Week resource"/index.html)

Read More

[Outpace Malware, Build Faster, and Secure Software With Real-Time Protection](/content/blog/outpace-malware-build-faster-and-secure-software-with-real-time-protection "Internal link to Outpace Malware, Build Faster, and Secure Software With Real-Time Protection resource"/index.html)

Read More

[Exploring Unnecessary Risk: The Persistence of Open Source Vulnerabilities](/content/blog/unnecessary-risk-the-persistence-of-open-source-vulnerabilities "Internal link to Exploring Unnecessary Risk: The Persistence of Open Source Vulnerabilities resource"/index.html)

Read More

[Unprecedented Automation: IndonesianFoods Pits Open Source Against Itself](/content/blog/unprecedented-automation-indonesianfoods-pits-open-source-against-itself "Internal link to Unprecedented Automation: IndonesianFoods Pits Open Source Against Itself resource"/index.html)

Read More

[Apache Tomcat: Vulnerable Versions Downloaded Nearly 100K Times Since PoC](/content/blog/apache-tomcat-vulnerability-widespread-exploitation-and-key-insights-from-sonatype "Internal link to Apache Tomcat: Vulnerable Versions Downloaded Nearly 100K Times Since PoC resource"/index.html)

Read More

.jpg?width=430&height=215&length=430&name=picklescan-blog%20copy%20(1).jpg)

[Bypassing picklescan: Sonatype Discovers Four Vulnerabilities](/content/blog/bypassing-picklescan-sonatype-discovers-four-vulnerabilities "Internal link to Bypassing picklescan: Sonatype Discovers Four Vulnerabilities resource"/index.html)

Read More

[The Hidden Threat: Tackling Malware in Your Software Supply Chain](/content/blog/the-hidden-threat-tackling-malware-in-your-software-supply-chain "Internal link to The Hidden Threat: Tackling Malware in Your Software Supply Chain resource"/index.html)

Read More

[Zero-Day Vulnerabilities: A Beginner's Guide](/content/blog/zero-day-vulnerabilities-a-beginners-guide "Internal link to Zero-Day Vulnerabilities: A Beginner's Guide resource"/index.html)

Read More

['everything' Matters - Why the npm Package Sparked Controversy](/content/blog/everything-matters-why-the-npm-package-sparked-controversy "Internal link to 'everything' Matters - Why the npm Package Sparked Controversy resource"/index.html)

Read More