Application Security
CWE-143 Improper Neutralization of Record Delimiters
A carriage return in a form field can add a whole new record to a data file. See how CWE-143 works and how to write records safely.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1429 Missing Feedback for Unexecuted Hardware Operations
When a hardware interface silently discards operations, failures and attacks go unseen. What CWE-1429 covers and the design and implementation fixes MITRE rates.
Oct 18, 20262 min read
Application Security
CWE-1428 Reliance on HTTP Instead of HTTPS: What to Change
HTTP traffic can be read and altered in transit, and HTTPS is usually available. What CWE-1428 covers and the four steps MITRE recommends.
Oct 18, 20262 min read
Application Security
CWE-1427 Prompt Injection: Neutralizing Input Used for LLM Prompts
When user text and system instructions share one prompt, the model cannot tell them apart. What CWE-1427 covers, real CVEs, and the layered defenses MITRE lists.
Oct 18, 20264 min read
Application Security
CWE-1426 Improper Validation of Generative AI Output
Model output is untrusted input to the rest of your system. What CWE-1426 means, a real XSS chain, and how to contain what an LLM can do.
Oct 18, 20262 min read
Application Security
CWE-1423 Shared Predictor State and Transient Execution Leaks
When processes share branch predictor state, one can steer another's speculative execution. How CWE-1423 works and what hardware and software mitigations exist.
Oct 18, 20263 min read
Application Security
CWE-1422 Incorrect Data Forwarding During Transient Execution
When a CPU forwards stale or wrong data to transient operations, secrets can leak through side effects. What CWE-1422 covers and how to reduce exposure.
Oct 18, 20263 min read
Application Security
CWE-1421 Data Leaks in Shared Microarchitectural Structures
Transient operations can read protected data left in shared CPU structures like caches and buffers. How CWE-1421 works and which defenses MITRE rates highest.
Oct 18, 20263 min read
Application Security
CWE-1420 Sensitive Information Exposure in Transient Execution
Processors run instructions speculatively, and the traces can leak data over covert channels. What CWE-1420 means, how it is found, and which mitigations MITRE rates.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.