Application Security
CWE-541 Sensitive Information in Include Files: What to Know
Include files often hold usernames and passwords. If the source is reachable, so are the secrets. How CWE-541 happens and how to fix it.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-540 Sensitive Information in Source Code: Real Cases and Fixes
Tokens in JavaScript, passwords in HTML, hostnames in comments. How CWE-540 leaks secrets through code that users can read and how to prevent it.
Oct 18, 20264 min read
Application Security
CWE-54 Trailing Backslash Path Equivalence and ASP.NET Bypass
A trailing backslash or its encoded form %5C let attackers past directory authentication in a .NET web framework. CWE-54 explained.
Oct 18, 20263 min read
Application Security
CWE-539 Persistent Cookies With Sensitive Data: Risks and Fixes
Persistent cookies live on disk. Putting sensitive data in them widens who can read it. How CWE-539 happens and what to do instead.
Oct 18, 20262 min read
Application Security
CWE-538 Sensitive Data in Externally Accessible Files
Secrets written into files or directories that other people can read. How CWE-538 happens, including a real build log example, and how to fix it.
Oct 18, 20262 min read
Application Security
CWE-537 Java Runtime Error Messages: Keep Exceptions Off the Screen
Unhandled Java exceptions can show internals to users. A short guide to CWE-537 and the one rule MITRE gives for fixing it.
Oct 18, 20262 min read
Application Security
CWE-536 Servlet Runtime Error Messages: Stop Leaking Stack Traces
Uncaught exceptions in a Java servlet can show file paths and stack traces to visitors. How CWE-536 happens and how to contain it.
Oct 18, 20262 min read
Application Security
CWE-535 Shell Error Message Exposure: What It Reveals
A raw command shell error shown to a user signals unhandled exceptions and leaks internals. How CWE-535 happens and how to handle errors safely.
Oct 18, 20262 min read
Application Security
CWE-532 Sensitive Information in Log Files: Find It and Fix It
Passwords and tokens written to logs give attackers a quieter path to your secrets. How CWE-532 happens, how to find it, and how to stop logging them.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.