44% of applications contain critical vulnerabilities in an open source component* and this although good practices like OWASP Top 10 have become widespread.
Do not let these vulnerabilities incubate warm in the belly of your app! With this talk you'll learn how those vulnerabilities are indexed (NVD, CVE) and how their severity is scored (CVSS).
Do you first step in the DevSecOps philosophy !!!
Senior Lead Developer for Société Générale, I'm an active evangelist on "value creation" focused methodologies, such as DDD/Hexagonal Architecture, l'XP and Kanban #NoEstimates.
As an OWASP fundation member, I strive to convey the DevSecOps mindset to the community. I set up several Continuous Security pipelines at companies scale.