The Mend.io AppSec Blog

Apache Struts Vulnerabilities Pose ‘Stay or Go’ Question

Tiffany Jennings Nov 22, 2020

Open Source Security

Stay informed about the latest Apache Struts vulnerabilities and the ongoing debate of whether to continue using the framework or migrate off it.

Apache struts vulnerabilities pose ‘stay or go’ question - merge confidence blog

Get to know Mend Merge Confidence Feature

Tiffany Jennings Nov 16, 2020

Inside Mend.io

Introducing Mend Merge Confidence, a feature to save time and reduce risk in updating dependencies. Learn how it works and more.

What Is CVSS v3.1? Understanding The New CVSS

Tiffany Jennings Nov 14, 2020

Open Source Security

Learn about the Common Vulnerability Scoring System (CVSS) v3.1 & how it measures severity, not risk, in assessing security vulnerabilities.

Apache struts vulnerabilities pose ‘stay or go’ question -

White Box Testing Guide

Tiffany Jennings Nov 12, 2020

Application Security Testing

Learn about White Box Testing in software development with this comprehensive guide. Understand the types, techniques, tools, advantages.

Apache struts vulnerabilities pose ‘stay or go’ question - bsd screen

Top 8 BSD License’s Questions Answered

Rami Sass Nov 5, 2020

Open Source Licenses

Get answers to the top 8 BSD License questions in this blog. Learn about the terms, compatibility with GPL, copyleft status, and more.

SCA vs SBOM: Getting Started With Software Composition Analysis

Tiffany Jennings Oct 29, 2020

Software Composition Analysis

Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.

Apache struts vulnerabilities pose ‘stay or go’ question - top open source licenses

Open Source Copyleft Licenses: All You Need to Know

Tiffany Jennings Oct 24, 2020

Open Source Licenses

All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.

How to Expose Ports in Docker

Guy Bar-Gil Oct 21, 2020

Developer

Learn how to expose ports in Docker with different networking rules. Understand the differences between EXPOSE, --expose, -P, and -p flags.

Apache struts vulnerabilities pose ‘stay or go’ question - vulnerability prioritization image blog

Be Wise — Prioritize: Software Security Vulnerability Prioritization

Tiffany Jennings Oct 15, 2020

Open Source Security

Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.

Eclipse SW360: Main Features

Tiffany Jennings Oct 8, 2020

Open Source Licenses

Learn about the main features of Eclipse SW360, an open source tool to manage software components.

Apache struts vulnerabilities pose ‘stay or go’ question - cddl

Top 10 Common Development and Distribution License Questions Answered

Rami Sass Oct 8, 2020

Open Source Licenses

Get answers to the top 10 Common Development and Distribution License questions. Learn about CDDL terms, compatibility, and more.

Apache struts vulnerabilities pose ‘stay or go’ question - 1 1

Using Go Modules for Golang Dependency Management

Alfrick Opidi Oct 5, 2020

Developer

Learn how to use Go Modules for efficient Golang dependency management. Simplify package management, updating, and removal in your Go apps.

Why Manually Tracking Open Source Components Is Futile

Tiffany Jennings Oct 1, 2020

Open Source Security

Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.

Black Box Testing: What You Need to Know

Tiffany Jennings Sep 24, 2020

Application Security Testing

Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.

Top 9 Code Review Tools for Clean and Secure Source Code

Tiffany Jennings Sep 10, 2020

Application Security Testing

Discover the top 9 code review tools for clean and secure source code, essential for detecting errors and defects before production.

Apache struts vulnerabilities pose ‘stay or go’ question - gota track them all

Open Source Vulnerability Databases

Tiffany Jennings Sep 8, 2020

Open Source Security

Discover the top open source vulnerability databases beyond NVD. Learn how to track and remediate vulnerabilities in your software.

Mend.io Blog

Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

Filter & Search

Subscribe to our Blog

Thank you