Application Security
CWE-694 Multiple Resources With Duplicate Identifier
Code that assumes every name or ID is unique can be tricked into acting on the wrong item. CWE-694 includes a signature check bypass in an archive.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-693 Protection Mechanism Failure: Missing, Weak or Ignored
A defense that is absent, partial or skipped on one code path is the same as no defense there. CWE-693 sorts these failures into three kinds.
Oct 18, 20263 min read
Application Security
CWE-692 Incomplete Denylist to XSS: Why Blocking script Tags Fails
Filtering out script tags does not stop cross-site scripting, because browsers parse HTML in too many ways. CWE-692 shows why denylists lose and what to use instead.
Oct 18, 20263 min read
Application Security
CWE-691 Insufficient Control Flow Management: Goto Fail and Beyond
CWE-691 is the parent of bugs where execution takes a path the author did not intend, from skipped certificate checks to coupon abuse. A tour of its examples.
Oct 18, 20263 min read
Application Security
CWE-690 Unchecked Return Value to NULL Pointer Dereference
A function returns NULL on failure, the caller never looks, and the next line crashes. CWE-690 explained with C and Java examples and the checks that prevent it.
Oct 18, 20264 min read
Application Security
CWE-69 Windows ::DATA Alternate Data Streams: Risk and Fixes
NTFS files can carry hidden streams. When code ignores them, attackers can hide data, dodge quotas or read source. Here is how CWE-69 shows up and what to do.
Oct 18, 20263 min read
Application Security
CWE-689 Permission Race Condition During Resource Copy
Copy a file, then lock it down, and there is a window where anyone can read it. CWE-689 shows the pattern in archive extractors and how to close the gap.
Oct 18, 20262 min read
Application Security
CWE-688 Wrong Variable or Reference Passed as an Argument
Passing the wrong variable to a function is a copy and paste classic. CWE-688 includes a kernel NULL pointer case and simple ways to catch it.
Oct 18, 20262 min read
Application Security
CWE-687 Function Call With Incorrectly Specified Argument Value
The right function with the wrong value, such as a bad flag, mode or size. CWE-687 is hard for tools to see because it depends on intent. Here is how to catch it.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.