Blogs

Fixing `marked` XSS vulnerability

Snyk

A recently published vulnerability in the npm `marked` package shows how attackers can use the flexibility of the Markdown format to introduce Cross-Site Scripting vulnerabilities.

Visit Site

Vulnerability assessmentSnyk What is a Container Registry security?Snyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk Using Snyk reporting for data-driven securitySnyk Introducing AI AssistantMintlify Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker Vulnerability Scanning is BrokenSocket Unpacking the ROI of Coana's SCA With Reachability AnalysisSocket Socket Joins New OpenJS Program to Fund Node.js Security WorkSocket Next.js moves to scheduled security releasesSocket Sink or Swim: Tackling 2024's Record-Breaking Vulnerability WaveAquasec Looney Tunables Vulnerability Exploited by KinsingAquasec Trivy supply chain compromise: What Docker Hub users should knowDocker Why Vulnerability Scanning Isn't Enough To Protect Your AppSocket Vulnerability Management in Container ImagesAquasec Cloud Native Security Best Practices: Vulnerability ManagementAquasec Linguistic Lumberjack: Understanding CVE-2024-4323 in Fluent BitAquasec Trivy: The Universal Scanner to Secure Your Cloud MigrationAquasec