Safeguard
Tag

cwe-22

Safeguard articles tagged "cwe-22" — guides, analysis, and best practices for software supply chain and application security.

94 articles

Vulnerability Analysis

CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability

CVE-2024-1708 affects ConnectWise ScreenConnect and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-28.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

CVE-2026-20262 affects Cisco Catalyst SD-WAN Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-15.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability

CVE-2026-34909 affects Ubiquiti UniFi OS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-23.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability

CVE-2026-48282 affects Adobe ColdFusion and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-07.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability

CVE-2026-59310 affects Broadcom VMware vCenter and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-18.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

CVE-2026-66384 affects JFrog Artifactory and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-27.

Sep 17, 20263 min read
Vulnerability Analysis

Path traversal vulnerabilities explained with real-world examples

Path traversal (CWE-22) has powered CVEs from Apache to Citrix to F5. Here's how it works, real breaches, and how to stop it.

Aug 4, 20266 min read
Application Security

Secure file uploads in Node.js and Fastify

CWE-22 path traversal climbed three spots to #5 on the 2024 CWE Top 25. Here's how to validate, store, and scan Fastify uploads without trusting the client.

Jul 15, 20266 min read
Application Security

Path traversal, decoded: canonicalization patterns across languages

CVE-2021-41773 turned a broken path-normalization routine in Apache 2.4.49 into remote code execution. Here's how canonicalization stops the whole bug class.

Jul 15, 20266 min read
Application Security

Detecting and preventing Zip Slip and path traversal in Java

Snyk's 2018 Zip Slip disclosure hit Amazon, Apache, and LinkedIn projects at once — here's how the flaw still hides in Java archive code today, and how to catch it.

Jul 14, 20265 min read
Application Security

Preventing path traversal in Node.js file upload and serving code

path.join() doesn't stop ../../etc/passwd — CVE-2024-12905 and Zip Slip show why Node.js needs explicit containment checks, not just path normalization.

Jul 14, 20266 min read
Vulnerability Guides

Path Traversal Vulnerability Prevention, Explained

One unvalidated filename and `../../../etc/passwd` reads files you never meant to expose — or worse, executes them. Here's how path traversal works and how to build file access that can't be tricked.

Jul 6, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.