{"id":64815,"date":"2022-05-06T08:52:42","date_gmt":"2022-05-06T15:52:42","guid":{"rendered":"https:\/\/github.blog\/?p=64815"},"modified":"2022-05-06T08:52:42","modified_gmt":"2022-05-06T15:52:42","slug":"todays-most-common-security-vulnerabilities-explained","status":"publish","type":"post","link":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/","title":{"rendered":"Today\u2019s most common security vulnerabilities explained"},"content":{"rendered":"<p>Did you know that according to a <a href=\"https:\/\/www.securecodewarrior.com\/press-releases\/secure-code-warrior-survey-finds-86-of-developers-do-not-view-application-security-as-a-top-priority\">new Secure Code Warrior survey<\/a>, a surprising 86% of developers do not view application security as a top priority? This is concerning since 85% of codebases contain known open source vulnerabilities.<\/p>\n<p>We\u2019d like to change that. The vision of the <a href=\"https:\/\/securitylab.github.com\/\">GitHub Security Lab<\/a> is to find vulnerabilities, amplify research, educate, and enable the community to secure the open source software we all depend on. A key step toward this is developer education on the latest security vulnerabilities. This will empower developers to actively find and report new vulnerabilities in the ecosystem. To that end, let\u2019s look at a few of the common weaknesses we\u2019ve recently seen, and the tools you can adopt to combat them.<\/p>\n<aside class=\"p-4 p-md-6 post-aside--large\"><p class=\"h5-mktg gh-aside-title\">According to a new Secure Code Warrior survey, developers\u2019 actions and attitudes toward software security are in conflict:<\/p><p>\n* 86% do not view application security as a top priority when writing code.<br \/>\n* 67% are knowingly shipping vulnerabilities in their code.<br \/>\n* 36% attribute the priority of meeting deadlines as a primary reason for deprioritizing security.<br \/>\n* 33% don\u2019t understand what makes their code vulnerable.<\/p>\n<\/aside>\n<h2 id=\"what-types-of-vulnerabilities-exist-out-there\"><a class=\"heading-link\" href=\"#what-types-of-vulnerabilities-exist-out-there\">What types of vulnerabilities exist out there?<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p>Vulnerabilities are flaws in your code that, when exploited by hackers, can lead to private data leakage, code tampering, or even complete data loss. Note that the types of vulnerabilities you\u2019ll encounter will vary depending on the development framework and programming language. That said, here are some of the most common types of vulnerabilities you need to be aware of:<\/p>\n<h3 id=\"sql-injection\"><a class=\"heading-link\" href=\"#sql-injection\">SQL injection<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h3>\n<p>This is a code injection attack that\u2019s triggered when a bad actor adds harmful logic into your SQL statements through user input. The vulnerability stems from not performing input sanitization or performing it incorrectly. Implications include unauthorized data access, modification and data loss, and changes to an application&#8217;s content and behavior. Some common SQL injection examples include:<\/p>\n<ul>\n<li>Modification of an SQL query so that it returns additional results that a user shouldn\u2019t have access to (like payment information).<\/li>\n<li>UNION attacks, which allow data from other tables to be retrieved.<\/li>\n<\/ul>\n<p>Find other types of SQL injections on the <a href=\"https:\/\/owasp.org\/www-community\/attacks\/SQL_Injection\">OWASP website<\/a>.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-64820 width-fit\" src=\"https:\/\/i0.wp.com\/imgs.xkcd.com\/comics\/exploits_of_a_mom.png?ssl=1\" alt=\"xkcd: Exploits of a Mom\" \/><br \/>\n<sup>Image: <a href=\"https:\/\/xkcd.com\/327\/\">xkcd &#8211; Exploits of a Mom<\/a><\/sup><\/p>\n<p>\ud83d\udcfa\u00a0 Learn more about how to secure your code against SQL injection attacks with <a href=\"https:\/\/www.youtube.com\/watch?v=VE6c57Tk5gM&amp;list=PL0lo9MOBetEG_DhJH0Swff0wZzfytwAJb&amp;index=2\">this video<\/a>.<\/p>\n<h3 id=\"command-injection\"><a class=\"heading-link\" href=\"#command-injection\">Command injection<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h3>\n<p>This is another code injection attack that occurs when a malicious actor inserts a command into an application that will then be executed in the host system using the system\u2019s privileges. A command injection attack can compromise the application, its data, connected servers, and other infrastructure. Some examples include:<\/p>\n<ul>\n<li>Arbitrary command injection\u2014where an application receives arbitrary system commands directly from other users.<\/li>\n<li>Arbitrary file uploads\u2014where an application allows end-users to upload files containing arbitrary extensions. This makes malicious actors able to inject commands once the uploaded files are added to the webroot.<\/li>\n<li><a href=\"https:\/\/owasp.org\/www-community\/vulnerabilities\/XML_External_Entity_(XXE)_Processing\">XML external entity injection<\/a>\u2014where bad actors read arbitrary files from the server and cause Denial of Service (DoS) attacks.<\/li>\n<\/ul>\n<p>\ud83d\udcfa\u00a0 Learn how to secure your code against injection attacks in <a href=\"https:\/\/www.youtube.com\/watch?v=FI2w6LYwJX0&amp;list=PL0lo9MOBetEG_DhJH0Swff0wZzfytwAJb&amp;index=6\">this video<\/a>.<\/p>\n<h3 id=\"cross-site-scripting-xss\"><a class=\"heading-link\" href=\"#cross-site-scripting-xss\">Cross-site scripting (XSS)<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h3>\n<p>This is a web injection attack where malicious scripts are injected into otherwise benign websites. Due to JavaScript scripts running on the victim\u2019s browser, XSS attacks are able to steal sensitive data like authentication cookies. This is common on public websites, where attackers can target the website\u2019s visitors by adding their own ads and phishing prompts.<\/p>\n<p>\ud83d\udcfa\u00a0 Learn more about how to stop hackers from injecting JavaScript into your webpage with <a href=\"https:\/\/www.youtube.com\/watch?v=AMiYYIgdhVQ&amp;t=283s\">this video<\/a>.<\/p>\n<h3 id=\"cross-site-request-forgery-csrf\"><a class=\"heading-link\" href=\"#cross-site-request-forgery-csrf\">Cross-site request forgery (CSRF)<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h3>\n<p>This attack forces the end-user to execute unwanted actions on a web application in which they\u2019re currently authenticated. Unwanted actions might include fund transfers or a change of personal information. Basically, these attacks take advantage of the target site\u2019s trust for requests initiated by authenticated users that in reality are initiated from elsewhere. An example of CSRF includes:<\/p>\n<ul>\n<li>An authenticated user of an online banking website transfers $500 to their son\u2019s checking account online. However, the bank\u2019s website is vulnerable to CSRF so instead of sending money to their son, they send it elsewhere.<\/li>\n<\/ul>\n<p>\ud83d\udcfa\u00a0 Learn how to stop hackers from impersonating you via CSRF with <a href=\"https:\/\/www.youtube.com\/watch?v=bTMbeXJNK8E\">this video<\/a>.<\/p>\n<p>For more information on the top types of vulnerabilities, visit <a href=\"https:\/\/owasp.org\/www-project-top-ten\/\">The Open Web Application Security Project (OWASP) Top Ten<\/a>.<\/p>\n<h2 id=\"how-github-keeps-your-software-safe-for-free\"><a class=\"heading-link\" href=\"#how-github-keeps-your-software-safe-for-free\">How GitHub keeps your software safe\u2014for free<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p>Now, if you\u2019re developing on GitHub, we provide a suite of developer-first security tools to help you find and fix vulnerabilities and we make our security tooling available for free to open source projects. GitHub\u2019s code scanning, powered by CodeQL, catches common patterns in your code. It can also run within your pull requests, detecting vulnerabilities before they reach your main branch. Beyond protecting your code, CodeQL teaches you what to look out for in the future, as each query contains information on the vulnerability pattern detected, including examples of vulnerable code, secure ways to implement the same code, and external references.<\/p>\n<p>GitHub\u2019s Dependabot alerts you to vulnerabilities in your dependencies and suggests updates to safe versions of these dependencies. If you enable Dependabot alerts, you\u2019ll be automatically notified when a new GitHub-reviewed advisory affects the packages you depend on. For supported ecosystems, Dependabot can even open a pull request for you to merge updates. Each security advisory contains information about the vulnerability, including the description, severity, impact, and optional details such as references, fix commits, and workarounds.<\/p>\n<p>We also provide secret scanning functionality to notify you if credentials for third-party services accidentally make it into your source code and partner with companies across the world to automatically invalidate any secrets that do make it through, allowing you to rotate them quickly. We now recognize over 69 different secret tokens, but customers of GitHub Advanced Security can also customize their own.<\/p>\n<p>To learn more about how to get started code scanning with CodeQL, visit our <a href=\"https:\/\/docs.github.com\/en\/code-security\/code-scanning\/automatically-scanning-your-code-for-vulnerabilities-and-errors\/about-code-scanning-with-codeql\">GitHub Docs code scanning page<\/a>.<\/p>\n<p>To learn more about how to get started with Dependabot, visit our <a href=\"https:\/\/docs.github.com\/en\/code-security\/dependabot\/dependabot-version-updates\/configuring-dependabot-version-updates\">GitHub Docs Dependabot page<\/a>.<\/p>\n<p>To learn more about how to get started with secret scanning, visit our <a href=\"https:\/\/docs.github.com\/en\/code-security\/secret-scanning\/about-secret-scanning\">GitHub Docs secret scanning page<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We&#8217;re taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves. <\/p>\n","protected":false},"author":1991,"featured_media":64763,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_gh_post_show_toc":"no","_gh_post_is_no_robots":"","_gh_post_is_featured":"no","_gh_post_is_excluded":"no","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"https:\/\/github.blog\/wp-content\/uploads\/2022\/01\/GitHub-Security_green-square-icon.png","_gh_post_sq_img_id":"62555","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"Click Here to Learn More","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[3334,91],"tags":[1880,145,1915,2586],"coauthors":[2719],"class_list":["post-64815","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-application-security","category-security","tag-code-scanning","tag-dependabot","tag-github-security-lab","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Today\u2019s most common security vulnerabilities explained - The GitHub Blog<\/title>\n<meta name=\"description\" content=\"We&#039;re taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Today\u2019s most common security vulnerabilities explained\" \/>\n<meta property=\"og:description\" content=\"We&#039;re taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-06T15:52:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Joseph Katsioloudes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joseph Katsioloudes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/\"},\"author\":{\"name\":\"Joseph Katsioloudes\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/7d17b2ef14b6b561a5beb888f2711b49\"},\"headline\":\"Today\u2019s most common security vulnerabilities explained\",\"datePublished\":\"2022-05-06T15:52:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/\"},\"wordCount\":1029,\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Security-Product@2x-1.png?fit=2400%2C1260\",\"keywords\":[\"code scanning\",\"Dependabot\",\"GitHub Security Lab\",\"Security\"],\"articleSection\":[\"Application security\",\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/\",\"name\":\"Today\u2019s most common security vulnerabilities explained - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Security-Product@2x-1.png?fit=2400%2C1260\",\"datePublished\":\"2022-05-06T15:52:42+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/7d17b2ef14b6b561a5beb888f2711b49\"},\"description\":\"We're taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Security-Product@2x-1.png?fit=2400%2C1260\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Security-Product@2x-1.png?fit=2400%2C1260\",\"width\":2400,\"height\":1260},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/todays-most-common-security-vulnerabilities-explained\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/github.blog\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Application security\",\"item\":\"https:\\\/\\\/github.blog\\\/security\\\/application-security\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Today\u2019s most common security vulnerabilities explained\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/7d17b2ef14b6b561a5beb888f2711b49\",\"name\":\"Joseph Katsioloudes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g239cce1def08b3463537a83952a0cea8\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g\",\"caption\":\"Joseph Katsioloudes\"},\"description\":\"Joseph is a leading voice in cybersecurity and AI, developing software and content that shape how developers build securely. His open source game gh.io\\\/scg has helped over 10,000 developers gain future-proof security skills. His videos, with 2.8M+ views, simplify complex security topics and deliver actionable tips to a global audience. As a speaker, Joseph has delivered 79 talks across 25 countries over the past four years, captivating audiences with his insights and energetic stage presence.\",\"url\":\"https:\\\/\\\/github.blog\\\/author\\\/jkcso\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Today\u2019s most common security vulnerabilities explained - The GitHub Blog","description":"We're taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/","og_locale":"en_US","og_type":"article","og_title":"Today\u2019s most common security vulnerabilities explained","og_description":"We're taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.","og_url":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/","og_site_name":"The GitHub Blog","article_published_time":"2022-05-06T15:52:42+00:00","og_image":[{"width":2400,"height":1260,"url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","type":"image\/png"}],"author":"Joseph Katsioloudes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joseph Katsioloudes","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#article","isPartOf":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/"},"author":{"name":"Joseph Katsioloudes","@id":"https:\/\/github.blog\/#\/schema\/person\/7d17b2ef14b6b561a5beb888f2711b49"},"headline":"Today\u2019s most common security vulnerabilities explained","datePublished":"2022-05-06T15:52:42+00:00","mainEntityOfPage":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/"},"wordCount":1029,"image":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","keywords":["code scanning","Dependabot","GitHub Security Lab","Security"],"articleSection":["Application security","Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/","url":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/","name":"Today\u2019s most common security vulnerabilities explained - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","datePublished":"2022-05-06T15:52:42+00:00","author":{"@id":"https:\/\/github.blog\/#\/schema\/person\/7d17b2ef14b6b561a5beb888f2711b49"},"description":"We're taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves.","breadcrumb":{"@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","width":2400,"height":1260},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/security\/application-security\/todays-most-common-security-vulnerabilities-explained\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/github.blog\/security\/"},{"@type":"ListItem","position":3,"name":"Application security","item":"https:\/\/github.blog\/security\/application-security\/"},{"@type":"ListItem","position":4,"name":"Today\u2019s most common security vulnerabilities explained"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/github.blog\/#\/schema\/person\/7d17b2ef14b6b561a5beb888f2711b49","name":"Joseph Katsioloudes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g239cce1def08b3463537a83952a0cea8","url":"https:\/\/secure.gravatar.com\/avatar\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bddfc0866211bac1dd867ca4b12ba8a9d4c50a61168c6ddf11b323ab6de67cca?s=96&d=mm&r=g","caption":"Joseph Katsioloudes"},"description":"Joseph is a leading voice in cybersecurity and AI, developing software and content that shape how developers build securely. His open source game gh.io\/scg has helped over 10,000 developers gain future-proof security skills. His videos, with 2.8M+ views, simplify complex security topics and deliver actionable tips to a global audience. As a speaker, Joseph has delivered 79 talks across 25 countries over the past four years, captivating audiences with his insights and energetic stage presence.","url":"https:\/\/github.blog\/author\/jkcso\/"}]}},"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/pamS32-gRp","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/05\/Security-Product@2x-1.png?fit=2400%2C1260","_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/1991"}],"replies":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/comments?post=64815"}],"version-history":[{"count":19,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64815\/revisions"}],"predecessor-version":[{"id":64818,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64815\/revisions\/64818"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/64763"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=64815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/categories?post=64815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/tags?post=64815"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=64815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}