Tag

cve-2021-26291

Safeguard articles tagged "cve-2021-26291" — guides, analysis, and best practices for software supply chain and application security.

1 article

Apache Maven's Insecure HTTP Repository Resolution Enabli...

CVE-2021-26291 shows how Apache Maven resolved dependencies over plain HTTP, letting a MITM attacker swap in malicious artifacts during the build.