Two serious vulnerabilities leading to remote code execution (RCE) have been found in the popular Spring framework, one in Spring… Read more Java Naming and Directory Interface (JNDI) is a Java API that allows clients to discover and look up data and… Read more On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited… Read more Preventing JNDI injection vulnerabilities by using a source code review is always a good idea. Read more