Sonatype Logo dark

Platform
- Products
- Why Sonatype
- Accelerate Pipelines with the World's Leading Artifact Repository Manager
- Explore solutions for you
Solutions
- OSS Management
- Developer Solutions
- Industry
- Sonatype Named a Leader in Forrester Wave™ for SCA Software
Pricing
Resources
- Resources
- Customer Resources
- Developer Community
- Research Vulnerabilities and Find the Safest Components for AI-Driven Development
Company
- Company
  - About
  - Customer Stories
  - Events
  - Newsroom
  - Careers
  - Blog
  - Contact Us
- Partners
- Contact Us
  
  Speak to a Software Supply Chain Expert
Login Contact Us Book a Demo

Login Contact Us Book a Demo

This is a search field with an auto-suggest feature attached.

There are no suggestions because the search field is empty.

open source vulnerability Posts

Filters

Search

Topics

AI

Application Security

DevOps

Malware & Vulnerabilities

Regulations & Compliance

SBOM

Software Development

featured image for The Hugging Face Incident Changes the Vulnerability Equation

Blog Post

The Hugging Face Incident Changes the Vulnerability Equation

Read More

featured image for CVE-2024-53677: A Critical File Upload Vulnerability in Apache Struts2

Blog Post

CVE-2024-53677: A Critical File Upload Vulnerability in Apache Struts2

Read More

featured image for Vulnerability Handling Requirements for NIS2 Compliance

Blog Post

Vulnerability Handling Requirements for NIS2 Compliance

Read More

featured image for Why Developers Are Becoming the Weakest Link in Supply Chain Attacks

Blog Post

Why Developers Are Becoming the Weakest Link in Supply Chain Attacks

Read More

featured image for Dirty Rivers Flow Downstream, Leading to Dirty Reservoirs

Blog Post

Dirty Rivers Flow Downstream, Leading to Dirty Reservoirs

Read More

featured image for A Lesson in Why Security by Press Release Is Detrimental

Blog Post

A Lesson in Why Security by Press Release Is Detrimental

Read More

featured image for Software Composition Analysis: Precision Definitely Matters (Just Ask Our Competitors)

Blog Post

Software Composition Analysis: Precision Definitely Matters (Just Ask Our Competitors)

Read More

featured image for Making Sure Our Users Don't Zip-Slip and Fall

Blog Post

Making Sure Our Users Don't Zip-Slip and Fall

Read More

featured image for WSJ on Struts: Companies Still Downloading Flaw Linked to Equifax Breach

Blog Post

WSJ on Struts: Companies Still Downloading Flaw Linked to Equifax Breach

Read More

featured image for Struts One-Two Punch Knocks Out India

Blog Post

Struts One-Two Punch Knocks Out India

Read More

featured image for Open Source Governance Hits the C-Suite

Blog Post

Open Source Governance Hits the C-Suite

Read More

featured image for Fooled Twice By the Same Open Source Problem? Shame on You. The Data Behind CVE-2017-8046

Blog Post

Fooled Twice By the Same Open Source Problem? Shame on You. The Data Behind CVE-2017-8046

Read More

1
2

Platform

Nexus One Pricing Nexus Repository Firewall Lifecycle Guide SBOM Manager Maven Central

Why Sonatype

Compare Sonatype Open Source Intelligence Best SCA Tools Best Malware Protection Tools Best Artifact Repository Solutions Best SBOM Compliance Solutions

Resources

Resources Center Blog Product Tours Webinars Customer Stories Analyst Reports Research

Developer

Integrations Free Nexus Repo Download OSS Component Search MCP Server Security Advisories

Customer Resources

My Sonatype Documentation Support

Company

About Careers Partners Newsroom Trust Center

Contact Us

X social logo
LinkedIn social logo
Facebook social logo
YouTube social logo
GitHub social logo

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences
Trust Center

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.