Application Security
CWE-158 Null Byte Injection: How It Works and How to Stop It
A NUL byte can end a string early in one layer and not in another. How CWE-158 enables validation bypass and file disclosure, and how to fix it.
Oct 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-157 Paired Delimiters: Unbalanced Quotes and Brackets
Missing closing quotes and brackets have crashed databases and caused overflows. How CWE-157 works and how to handle paired delimiters safely.
Oct 18, 20263 min read
Application Security
CWE-156 Whitespace Neutralization: When Spaces Change Meaning
Extra, missing or odd whitespace can fool filters and hog CPU. A practical guide to CWE-156 with mail based examples and fixes.
Oct 18, 20262 min read
Application Security
CWE-155 Wildcard and Matching Symbol Neutralization Failures
A star or percent in user input can list files, bypass restrictions or blow up memory. How CWE-155 works and how to fix it with escaping and allowlists.
Oct 18, 20262 min read
Application Security
CWE-154 Variable Name Delimiters: How to Stop Expansion Attacks
A dollar sign or percent sign in input can be expanded into a variable you never meant to expose. How CWE-154 happens and how to fix it.
Oct 18, 20263 min read
Application Security
CWE-153 Substitution Characters: Neutralization Failures
Characters that trigger substitution can pull in data the author never meant to share. What CWE-153 means, who is exposed and how to fix it.
Oct 18, 20262 min read
Application Security
CWE-152 Macro Symbol Neutralization: Risks and Fixes
When a server expands macro characters from untrusted input, data can leak. A short guide to CWE-152, its observed cases and how to fix it.
Oct 18, 20262 min read
Application Security
CWE-151 Comment Delimiter Neutralization: How It Breaks Parsers
Unneutralized comment markers let input hide text, merge fields or slip past warnings. How CWE-151 shows up in mail and markup, and how to fix it.
Oct 18, 20262 min read
Application Security
CWE-150 Escape and Control Sequence Neutralization Failures
Terminal escape codes, mail tilde escapes and raw control characters can rewrite what users see. Here is how CWE-150 happens and how to fix it.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.