log4j-remediation-tools

log4j-remediation-tools log4j2 취약점 CVE-2021-44228을 찾고 재현하기 위한 도구 도구 find-vulnerabilities: 실행 중인 JVM이 취약한지 휴리스틱하게 판단합니다. confirm-vulnerabilities: 실행 중인 JVM이 취약한지 100% 정확도로 판단합니다. 사용법 이 두 도구는 머신에서 실행 중인 모든 JVM 프로세스를 스캔하고, 취약할 수 있거나 취약한 프로세스에 대한 CSV 보고서를 생성합니다. 사용 세부 정보는 find-vulnerabilities/ 및...

Spring Office Hours Podcast: S5E15 - Upgrading Spring and OSS Security

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun tackle two challenges every Spring developer faces: keeping applications up to date and staying ahead of security vulnerabilities in open source dependencies. They explore how AI...

The winding road to compliance

“Here are the keys. Buy milk and bread. Drive safely.” These are important instructions for a new driver tasked with running an errand. But unless the driver knows where they are going, a bit of guidance on how to get to the store can only help. Without it, the driver may complete the errand...