• Platform
    Sometimes a vulnerability isn’t so vulnerable - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    Sometimes a vulnerability isn’t so vulnerable - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Sometimes a vulnerability isn’t so vulnerable - ai
    Mend AI Secure AI powered applications
    Sometimes a vulnerability isn’t so vulnerable - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Sometimes a vulnerability isn’t so vulnerable - dast icon 1 DAST Sometimes a vulnerability isn’t so vulnerable - apis icon 1 API security Sometimes a vulnerability isn’t so vulnerable - eol icon EOL support
    Platform Benefits
    Sometimes a vulnerability isn’t so vulnerable - repoi icon Repo integration Scalability-icon Scalability Sometimes a vulnerability isn’t so vulnerable - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Sometimes a vulnerability isn’t so vulnerable - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Sometimes a vulnerability isn’t so vulnerable -
    System prompt hardening Prevent prompt injection and misuse
    Sometimes a vulnerability isn’t so vulnerable - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Sometimes a vulnerability isn’t so vulnerable - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Sometimes a vulnerability isn’t so vulnerable - red teaming guide featured image
    AI Red Teaming Practical Guide
    Sometimes a vulnerability isn’t so vulnerable - featured image
    A CISO’s Guide to Securing AI from the Start
    Sometimes a vulnerability isn’t so vulnerable - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    Sometimes a vulnerability isn’t so vulnerable - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install
Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

LATEST
Learn more

Filter & Search

Sometimes a vulnerability isn’t so vulnerable - ahviptcynte0jmntzd1pdgvtzwrpdg9yaw1hz2umzmlszw5hbwu9axrlbwvkaxrvcmltywdlxzvjmzmyyzhjyjqyzmquanbnjnzlcnnpb249mdawmczzawc9mtbhnthjzjy0otk4m2rkngm3ymnknjzkyjm0yme2zta

Sometimes A Vulnerability Isn’t So Vulnerable

Tiffany Jennings Jan 7, 2019
Open Source Security

Discover how sometimes a vulnerability isn't as big of a threat as you may think. Learn about effective vs ineffective vulnerabilities.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - ahviptcynte0jmntzd1pdgvtzwrpdg9yaw1hz2umzmlszw5hbwu9axrlbwvkaxrvcmltywdlxzvjmwy3ztzmyjhjymuuanbnjnzlcnnpb249mdawmczzawc9mjhkmtk0zjnhzjy3otjmzjnimtg3ogu3odvmzwjkmwu

Who’s been naughty or nice in the Open Source-verse over 2018?

Tiffany Jennings Dec 27, 2018
Open Source Security

Reflect on the naughty and nice in the Open Source-verse in 2018 with the top vulnerabilities and cool projects.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable -

The National Vulnerability Database Explained

Tiffany Jennings Dec 18, 2018
Open Source Security

Learn about the National Vulnerability Database (NVD), the largest database of known vulnerabilities. Find out how it differs from the CVE.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - circle

Automating CIRCLECI ORB Updates

Rhys Arkins Dec 17, 2018
Developer

Automate CIRCLECI ORB updates with Renovate for low-risk, predictable versioning. Learn how to easily manage dependencies and stay up to date.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - 5 female pioneers of software development blog

5 Female Pioneers of Software Development We’re Grateful For This Thanksgiving

Tiffany Jennings Nov 15, 2018
DevSecOps

Learn about 5 female pioneers of software development we're grateful for. From Ada Lovelace to Barbara Liskov.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - devsecops 3 1

3 DevOps Security Challenges and How to Overcome Them

Tiffany Jennings Nov 10, 2018
DevSecOps

Learn how to overcome 3 DevOps security challenges, and how to integrate security into the DevOps pipeline.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - go ina

Automating GO Module Dependency Updates

Rhys Arkins Oct 2, 2018
Developer

Learn how to automate GO module dependency updates to save time & ensure consistency with Renovate, an open-source tool.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable -

Creating Your Open Source Policy Template: 3 Points You Don’t Want to Overlook

Tiffany Jennings Sep 27, 2018
Open Source Licenses

Learn how to create an effective open source policy template with 3 key points to ensure compliance and enforcement.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable -

Top Open Source Projects To Use For Junior Developers

Tiffany Jennings Sep 20, 2018
Open Source Licenses

Discover the top open source projects for junior developers to hone their coding skills. From Apache Commons to Google Guava, & more.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable -

Equifax Breach Year in Review: Vulnerabilities in Apache Struts Still Going Strong

Tiffany Jennings Aug 30, 2018
Open Source Security

Equifax breach review reveals vulnerabilities in Apache Struts are still unpatched by many companies. Learn why remediation is crucial.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - bitbucket

Automated Dependency Updates For Bitbucket Cloud

Rhys Arkins Aug 29, 2018
Developer

Learn how to use Renovate to keep your repositories up-to-date. Self-hosting instructions provided. Beta support available.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - itemeditorimage 5b7538bb4eb42

Zombies: Top 5 Open Source Vulnerabilities That Refuse To Die

Tiffany Jennings Aug 16, 2018
Open Source Security

Discover the top 5 open source vulnerabilities that still haunt developers. Learn how to protect your applications from security threats.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - itemeditorimage 5b72dd5a76231

The Next Generation of DevOps Adds Security into the Blend

Tiffany Jennings Aug 14, 2018
DevSecOps

DevOps and DevSecOps are a generation apart from each other, representing a natural evolution to the integration of automated security into the DevOps movement.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - ahviptcynte0jmntzd1pdgvtzwrpdg9yaw1hz2umzmlszw5hbwu9axrlbwvkaxrvcmltywdlxzvinjk3n2rkntflotquanbnjnzlcnnpb249mdawmczzawc9zmq4y2jiztnln2fhndczyjczytcyn2e5nza2owi0ytk

Dual Licensing for Open Source Components: Yeah or Meh?

Tiffany Jennings Aug 7, 2018
Open Source Licenses

Explore the pros & cons of dual licensing for open source components. Learn how it works, its benefits, challenges, & compliance requirements.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable - kubernetes ina

Automated Dependency Updates For Kubernetes Manifests

Rhys Arkins Aug 4, 2018
Developer

Learn how to configure file matching with Renovate to keep Docker dependencies up-to-date in manifests.

Read More Read More
Sometimes a vulnerability isn’t so vulnerable -

8 Startup Due Diligence Questions You want to Be Asking

Tiffany Jennings Aug 2, 2018
Open Source Licenses

Discover the top 8 due diligence questions to prepare your startup for investment. From technology roadmaps to scalability.

Read More Read More
Previous
1 ... 29 30 31 32 33 34 35 36
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report