Platform
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

What's happening with MITRE and the CVE program uncertainty

Blog Post

Open Source Malware Index Q1 2025: Data exfil threats rising sharply

Blog Post

Using Sonatype Nexus Repository with Docker Hub rate limits

Blog Post

Multiple crypto packages hijacked, turned into info-stealers

All blog posts

Filter by

Mastering SBOMs: Best practices

Blog Post

Exploited Ivanti Connect SSRF vulnerability traced back to 'xmltooling' OSS library

Blog Post

DevSecOps maturity model: A beginner's guide

Blog Post

npm flooded with 748 packages that store movies

Blog Post

Fake 'distube-config' npm package drops Windows info-stealing malware

Blog Post

What are the OWASP Top 10 vulnerabilities?

Blog Post

DevSecOps tools: A beginner's guide

Blog Post

'everything' matters - why the npm package sparked controversy

Blog Post

Unraveling the Struts2 security vulnerability: A deep dive

Blog Post

Struts2 CVE-2023-50164 by the numbers

Blog Post

OpenSSF responds to CISA, advocates for a multifaceted approach to software identification

Blog Post

Decrypting the Ledger connect-kit compromise: A deep dive into the crypto drainer attack

Blog Post

CVE-2023-50164: Another vulnerability in the widely used Apache Struts2 component

Blog Post

The Top 5 trends every CISO needs to know for 2024

Blog Post

The Top 5 trends every DevOps leader needs to know for 2024

1
...
10
11
12
...
14

Platform
- Overview
- Repository
- Pricing
- Firewall
- SBOM Manager
- Lifecycle
- Integrations
- AI/ML
- Other Products
  - Container
  - Advanced Legal Pack

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.