Tag

javascript-vulnerabilities

Safeguard articles tagged "javascript-vulnerabilities" — guides, analysis, and best practices for software supply chain and application security.

2 articles

Application Security

5 Node.js security code snippets every backend developer should know

Five real Node.js vulnerability patterns with vulnerable-vs-fixed code: prototype pollution, NoSQL injection, missing headers, path traversal, and JWT flaws.

May 24, 20268 min read

Vulnerabilities

CVE-2022-31129: The Day.js ReDoS Vulnerability, Explained

CVE-2022-31129 is a regular expression denial of service in Day.js's custom parse format handling. Here's what triggered it, why it's still showing up in scans, and how it was fixed.

Mar 19, 20245 min read