cwe-829
Safeguard articles tagged "cwe-829" — guides, analysis, and best practices for software supply chain and application security.
4 articles
CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2025-32463 affects Sudo Sudo and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-09-29.
CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2026-0770 affects Langflow Langflow and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-21.
polyfill.io (2024): What Happens When a CDN Domain Changes Hands
A factual account of the 2024 polyfill.io incident, in which a widely embedded JavaScript CDN domain was acquired and began serving malicious code to a large number of websites.
British Airways (2018): A Magecart Web Skimming Attack
A factual retrospective on the 2018 British Airways breach, in which attackers injected a JavaScript card-skimming script into the airline's payment page, compromising roughly 380,000 transactions.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.