Featured Article
Top 10 open source projects hit by HTTP/2 'Rapid Reset' zero-day
Discord recently patched a set of critical vulns that could allow a skilled attacker to gain Remote Code Execution privileges on the users’ Desktop app.
Read More...
Making Developer’s Lives Easier as We Enter The New Frontier of Dependency Management
4 minute read time
Sonatype's Advanced Development Pack will fundamentally change how teams manage code dependencies.
Read More...
GitLab: Instant, Inline, Indispensable Developer Insights
3 minute read time
Nexus Lifecycle now gives you instant, inline, indispensable insights on your GitLab MRs to speed development, shift security left, and improve innovation.
Read More...
Announcing the NeuVector & Sonatype Nexus Lifecycle Integration: Securing Containers Across the SDLC
3 minute read time
Sonatypes new integration between NeuVector and Nexus Lifecycle combines NeuVector’s open source detection and mitigation capabilities at the container application, operating system, and runtime
Read More...
CVE-2020-17479: The return of Validation Bypass (CVE-2019-19507) in `jpv`
3 minute read time
While updating our data for CVE-2020-17479 in JPV, an open-source JSON schema validator, we discovered that the vulnerability could still be exploited with the existing fix in place, creating
Read More...
Hitting the Trifecta With GitLab Automated Merge Requests
2 minute read time
Say hello to GitLab automated merge requests. Developers can now leverage Nexus Intelligence's precision to provide expert remediation guidance in GitLab.
Read More...
Nexus Repository: A Strategic Guide from Git to Governance
6 minute read time
This guide explains the marketplace of source code management and git repos, application-level building and binary repos, and open source governance.
Read More...
We Speak Your Language - New Ecosystems Available in Nexus Lifecycle
2 minute read time
Create and contextually enforce custom security, license, and architectural policies across the SDLC. Nexus Lifecycle now includes C/C++, PHP, and Ruby.
Read More...
Sonatype Rolls Out Enhanced JavaScript Scanning, npm Automated Pull Requests & More Free JS Developer Tools
2 minute read time
Enhanced JavaScript support provides improved accuracy, increased policy control, and faster remediation of open source vulnerabilities across the SDLC.
Read More...