A pair of security vulnerabilities discovered in the GitHub environments of two very popular open source projects from Apache and Google could be used to stealthily ...

World's largest Open Source foundation provides $22B+ in community-led software 100% free of charge for the common good Wilmington, DE, March 24, 2021 (GLOBE NEWSWIRE) -- The Apache Software ...

Microsoft's participation in Project Stonehenge marks the first time the company is contributing code to an Apache open source endeavor Microsoft is contributing code to an Apache open-source SOA ...

Apache has fixed a critical security vulnerability in its open-source OFBiz (Open For Business) software, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers.

Apache® Magpie provides open source maintainers with platform infrastructure for agent-assisted repository maintainershipWilmington, DE, June 30, 2026 (GLOBE NEWSWIRE) -- The Apache Software ...

Security firm Novee has revealed Cordyceps as a class of exploitable CI/CD vulnerabilities across open-source repositories ...

The vulnerability represents a bypass of fixes put in place this year for three critical RCE flaws that had the same root cause and have since been used in attacks. Developers of Apache OFBiz, an open ...

A critical Apache OFBiz pre-authentication remote code execution vulnerability is being actively exploited using public proof of concept (PoC) exploits. Apache OFBiz (Open For Business) is an ...

Apache Airflow is a great data pipeline as code, but having most of its contributors work for Astronomer is another example of a problem with open source. Depending on your politics, trickle-down ...

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

The operating system that powers every Android phone and tablet on the market is based on AOSP, short for the Android Open Source Project. Google develops and releases AOSP under the permissive Apache ...