Application Security
CWE-531 Sensitive Information in Test Code: Risks and Fixes
Test apps and test pages shipped to production often carry credentials and powerful functions. Here is how CWE-531 happens and how to remove it.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-530 Exposed Backup Files: How It Happens and How to Fix It
A stray config.php.bak in your webroot hands over source code to anyone who guesses the name. Here is how CWE-530 happens and how to stop it.
Oct 18, 20264 min read
Application Security
CWE-53 Multiple Internal Backslash Path Equivalence
Doubled backslashes inside a path can slip past rules written for single separators. What CWE-53 is and how to close it.
Oct 18, 20262 min read
Application Security
CWE-529 Exposed Access Control List Files: Risk and Fix
Access control list files stored where outsiders can reach them reveal how a system is configured. What attackers learn and the one step that prevents it.
Oct 18, 20262 min read
Application Security
CWE-528 Exposed Core Dump Files: Memory Left Where Others Can Read
A core dump is a snapshot of process memory, passwords included. Learn how dumps get exposed, a real CVE example, and how to protect them.
Oct 18, 20262 min read
Application Security
CWE-527 Exposed Version Control Repository on a Web Server
A CVS or git folder left on a web server or in an archive exposes names, paths and source diffs. How to spot it and keep repositories out of production.
Oct 18, 20262 min read
Application Security
CWE-526 Cleartext Secrets in Environment Variables: Risks and Fixes
Environment variables are handy for secrets and easy to leak through debug pages, logs and child processes. Three real CVEs and how to store secrets better.
Oct 18, 20264 min read
Application Security
CWE-525 Browser Cache Containing Sensitive Information
Without a caching policy, browsers keep copies of pages and forms that hold passwords or card numbers. Learn the Cache-Control fix and two real CVEs.
Oct 18, 20263 min read
Application Security
CWE-524 Cache Containing Sensitive Information: How to Prevent It
Caches speed things up, but a cache that outsiders can read leaks whatever it holds. What CWE-524 means, a real CVE pattern, and the three fixes.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.