Safeguard
Tag

java-supply-chain

Safeguard articles tagged "java-supply-chain" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

Apache Maven's Insecure HTTP Repository Resolution Enabli...

CVE-2021-26291 shows how Apache Maven resolved dependencies over plain HTTP, letting a MITM attacker swap in malicious artifacts during the build.

Nov 28, 20258 min read
java-supply-chain — Safeguard Blog