Software Composition

This week, the PHP project shipped emergency patches for PHP2Shell, two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Patching is the easy part.…

As of version 5.10.8 of CAST Highlight’s CLI and version 1.2.18 of the Code Reader, we are introducing an important change in how Open…

This product post provides guidance and requirements for preparing source code and configuring scans of your application to take full advantage of the OSS…

CAST Highlight now incorporates CISA’s KEV (Known Exploited Vulnerabilities) database to complement CVE information and help organizations prioritize vulnerability remediation efforts. See in this…

CAST Highlight automatically calculates a lifespan status on open-source software (OSS) components. This status identifies whether a component is active, possibly deprecated, or immature.…

By importing SBOMs in CycloneDX format, CAST Highlight can instantly analyze every component, check for known vulnerabilities, identify any licensing issues, and highlight any…

Software Composition Analysis (SCA) has become an essential part of modern software development, with a primary focus on analyzing and managing the risks associated…

CAST Highlight can perform a fine-grain comparison two snapshots of a scanned application and automatically identify which open-source software (OSS) components have been added,…

CAST Highlight automatically recommends quick and ideal component upgrade scenarios to remove vulnerabilities. See in this article how the Safe OSS Component Version Recommender…

[vc_row][vc_column width=”1/1″][vc_column_text]When dealing with Open Source license compatibility, verifying legal term compatibility between third-party components and their respective dependencies could turn into a never-ending…