The Cyber Resilience Act is Here
With the recent publication of the EU’s Cyber Resilience Act (CRA) in the EU official journal, a 3 year race...
security
The Eclipse Foundation offers a free security training for all Committers and Contributors
You know that security is important but just have no time to spend digging into numerous tutorials and guides to...
Securing the Future of Open Source: Launching the Open Regulatory Compliance Working Group
Today marks an important milestone for the open source community. As open source software continues to drive innovation across industries...
Per-Project Security Teams FAQ
In response to requests from various projects and after discussions between the Eclipse Foundation Security Team and the Architecture Council...
DO NOT USE IN PRODUCTION
Do you have a demo or examples in a specific repository? Or perhaps you have a functionality that needs time...
Exploring the Future of Open Source Security at OCX 2024
In the fast-paced world of software development, open source has emerged as a catalyst for innovation. But with this rapid...
Reviewing the CVE process and the CNA rules 4.0
As you probably know, the Eclipse Foundation is a CNA (CVE Numbering Authority), responsible for assigning vulnerability identification numbers, known...
Using GitHub Private Vulnerability Reporting by Eclipse Foundation Projects
Eclipse Foundation projects can request to use GitHub Private Vulnerability Reporting . This feature allows committers of projects hosted on...
Update to vulnerability description - CVSS 4.0
A vulnerability description includes several fields, like the title and description. However, one is causing difficulties for people writing CVE...
Eclipse CycloneDDS Security Audit Has Been Completed
Today, the Eclipse Foundation released the results of our security audit for Eclipse CycloneDDS . Findings from the audit have...