cwe-506
Safeguard articles tagged "cwe-506" — guides, analysis, and best practices for software supply chain and application security.
9 articles
CVE-2024-4978: Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
CVE-2024-4978 affects Justice AV Solutions Viewer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-05-29.
CVE-2025-30066: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-30066 affects tj-actions changed-files GitHub Action and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-18.
CVE-2025-30154: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-30154 affects reviewdog action-setup GitHub Action and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-24.
CVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability
CVE-2025-59374 affects ASUS Live Update and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-12-17.
CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
CVE-2025-54313 affects Prettier eslint-config-prettier and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-01-22.
CVE-2026-33634: Aquasecurity Trivy Embedded Malicious Code Vulnerability
CVE-2026-33634 affects Aquasecurity Trivy and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-26.
CVE-2026-8398: Daemon Tools Lite Embedded Malicious Code Vulnerability
CVE-2026-8398 affects Daemon Daemon Tools Lite and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-27.
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability
CVE-2026-48027 affects Nx Nx Console and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-27.
ua-parser-js (2021): An npm Account Takeover With Millions of Weekly Downloads
A factual account of the October 2021 ua-parser-js compromise, in which an attacker hijacked the maintainer npm account and published versions containing cryptominer and credential-stealing malware.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.