Tag
request-smuggling
Safeguard articles tagged "request-smuggling" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Application Security
Two Correct Parsers Can Disagree About the Same Multipart Request
A duplicate field name, an unusual boundary, a malformed header. Two standards-compliant parsers can resolve the same ambiguous bytes differently, and if a validator reads one interpretation while your application reads another, validation passed something it never actually checked.
Sep 18, 20267 min read
Security
CVE-2023-46589: The Tomcat Request Smuggling Flaw, Explained
CVE-2023-46589 lets an attacker smuggle HTTP requests past a reverse proxy by abusing malformed trailer headers in Apache Tomcat. Here is how it works and which versions to run.
Jun 24, 20266 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.