Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
CVE-2023-34042: How the Spring Security XSD Permission Flaw Works
CVE-2023-34042 is a world-writable file permission issue in Spring Security's config JAR. Here is what actually breaks, who is affected, and how to remediate it.
What Is This Code? How to Read and Secure Unfamiliar Source
A practical method for answering "what is this code?" when you inherit an unfamiliar file, plus how to spot the security problems hiding inside it.
What Causes a Memory Leak in JavaScript (and How to Find One)
A memory leak in JavaScript happens when objects you no longer need stay reachable, so the garbage collector can never free them. Here is how they start and how to hunt them down.
The Java Developer Kit Explained: Security Risks and How to Harden Your JDK
The Java Developer Kit is more than a compiler and runtime. Here is how to treat the JDK as part of your attack surface and keep it patched.
https-proxy-agent: What It Does and How to Use It Safely
A practical security review of https-proxy-agent, the Node.js module that tunnels HTTPS through an HTTP proxy, plus the advisories worth knowing before you pin a version.
CVE-2023-45133: Babel's Arbitrary Code Execution Flaw Explained
CVE-2023-45133 lets crafted code execute arbitrary commands during Babel compilation. Here's who is at risk, why it scores 9.3, and how to patch it.
JavaScript Uncaught Exceptions: A Security Guide
A JavaScript uncaught exception is more than a crash — unhandled errors leak internal detail, break security flows midway, and hide attacks. Here is how to handle them safely.
Mobile Number Validation in JavaScript: A Security-Aware Guide
Mobile number validation in JavaScript is easy to get wrong with a naive regex. Here is how to validate phone numbers correctly, safely, and without ReDoS.
CVE-2020-25638: SQL Injection in Hibernate ORM Explained
CVE-2020-25638 is a SQL injection flaw in hibernate-core that surfaces when SQL comments are enabled and literals are used in JPA Criteria queries. Here is who is affected and how to remediate it.
What Is an EPSS Score? A Practical Security Guide
A practical guide to the EPSS score: what it measures, how the score and percentile differ, and how to use EPSS to prioritize which CVEs to fix first.
What's a Zero-Day? The Vulnerability Defenders Fear Most
A zero-day is a vulnerability that attackers know about before the vendor has a fix, leaving defenders with zero days to patch. Here is what the term means and how teams respond.
Buffer Streams: Handling Binary Data Safely in Node.js
Buffer streams are how Node.js moves binary data without loading it all into memory. Here is how they work and the security bugs that hide in buffer handling.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.