Tag
apache-maven
Safeguard articles tagged "apache-maven" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Open Source Security
Apache Maven's Insecure HTTP Repository Resolution Enabli...
CVE-2021-26291 shows how Apache Maven resolved dependencies over plain HTTP, letting a MITM attacker swap in malicious artifacts during the build.
Nov 28, 20258 min read
DevSecOps
How to Download Maven for Windows and Verify It Safely
To download Maven for Windows, grab the binary zip from the official Apache site, verify its checksum, and set JAVA_HOME plus PATH. Here is the full, safe walkthrough.
Nov 13, 20256 min read