One Brotli decoder bug. A lot of copies. TL;DR - CVE-2026-111497 is an out-of-bounds write in the Brotli decompressor in google/brotli, fixed upstream in 1.2.1. It is not a separate Node, PHP, or npm ...
Semgrep Guardian goes self-serve with Codex support, plus incident-first advisories and transitive Autofix. See everything Semgrep shipped in October.
Semgrep is sponsoring our friends at OWASP Netherlands Chapter's next meetup – taking place on 29th October at KvK HQ, Utrecht. We're looking forward to catching up with the Dutch AppSec community!
Forrester has named Semgrep a Strong Performer in the first edition of The Forrester Wave™: Agentic Development Security ...
TL;DR: We continue our previous research in evaluating Claude Code and OpenAI Codex on finding vulnerabilities in real, open-source applications, with simple prompts and no scaffolding. In this post ...
It is with a complicated mixture of grief, relief, and the quiet satisfaction of an "I told you so" held in for over a decade that we record the passing of automatic lifecycle script execution in npm, ...
AI agents are writing code now. That part is settled. The question security teams should be asking is: how do you make those agents write secure code from the start, rather than trying to catch ...
We want using Semgrep to be like hiring an AppSec engineer to do the boring work. To be the best platform for code scanning, Semgrep must go beyond finding issues. It must autonomously remove noise, ...
Semgrep Supply Chain now covers the whole path for malicious dependencies: detecting exposure within minutes, responding automatically, and blocking malware before it's installed. Org-wide policies ...
You can do everything right and still get compromised. Part four of the Cybersecurity Readiness Month series covers how to contain an attacker, respond fast, and recover cleanly once they’re in. For ...
Are you ready to take your coding skills to the next level and ensure that your code is safe and secure on the internet? This exclusive training led by renowned security expert Tanya Janca will cover ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results