Tag

insufficient-encapsulation

Safeguard articles tagged "insufficient-encapsulation" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

Insufficient Encapsulation Vulnerabilities

An insufficient encapsulation vulnerability (CWE-485) exposes internal state to untrusted code. See how it drove real CVEs in Velocity, Lodash, and BeanUtils.

Nov 10, 20257 min read