cve
Safeguard articles tagged "cve" — guides, analysis, and best practices for software supply chain and application security.
179 articles
Apache Struts 2 Vulnerability History: The RCE Flaws You Must Patch
Apache Struts 2 vulnerabilities have caused some of the largest breaches on record. Here is the CVE lineage, why the same flaw keeps recurring, and how to detect it.
follow-redirects: Known Vulnerabilities and How to Stay Patched
follow-redirects sits under axios in millions of Node apps. A practical guide to its CVE history and how to keep the pinned version current.
CVE-2025-1094 in PostgreSQL psql: Patch Posture & SBOM Response
PostgreSQL psql SQL injection scored CVSS 8.1 and patched in 17.3 / 16.7 / 15.11 / 14.16 / 13.19. Defender SBOM and rollout playbook.
nginx/1.18.0 (ubuntu): What the Server Banner Reveals and How to Reduce Risk
Seeing nginx/1.18.0 (ubuntu) in a Server header tells you the version, the packaging, and roughly the age of a deployment. Here is what that string implies for security and what to check before assuming you are exposed.
NVD Full Form: What the National Vulnerability Database Is
The NVD full form is National Vulnerability Database, the U.S. government repository of known software vulnerabilities maintained by NIST. Here is what it contains and how to use it.
CVE Management for SMEs: A Practical Security Guide
A practical CVE guide for SMEs: what a CVE is, how small and medium teams should triage them without a full security department, and where to focus.
What Is a Security Vulnerability? A Clear Definition
A security vulnerability is a weakness that an attacker can exploit to compromise a system. Here is a precise definition and how it differs from a threat or risk.
The 2024 End-of-Year Vulnerability Disclosure Report
A look back at vulnerability disclosure in 2024: counts, severity distribution, time-to-patch, and the handful of incidents that shifted practice. Numbers, not narrative.
Vulnerability Exploitation Trends in 2024: What the Data Shows
Analysis of 2024 vulnerability exploitation patterns reveals faster weaponization timelines, shifting target profiles, and the growing importance of edge device vulnerabilities.
CWE Full Form: How the Common Weakness Enumeration Works
CWE stands for Common Weakness Enumeration — a community catalog of software and hardware weakness types. Here is what CWE means, how it differs from CVE, and how to use it.
NIST NVD Recovery: The New Consortium Reshaping Vulnerability Data
After months of processing backlogs and community frustration, NIST announces a new consortium to modernize and sustain the National Vulnerability Database.
Vulnerability Intelligence Platforms Compared for Supply Chain Security
Vulnerability intelligence platforms aggregate, enrich, and prioritize vulnerability data. This comparison examines how leading platforms handle supply chain-specific intelligence needs.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.