Application Security
CWE-142 Improper Neutralization of Value Delimiters Explained
When separators between values are not quoted or escaped, one value can become two. Learn how CWE-142 appears and how to serialize data safely.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1419 Incorrect Initialization of Resource: Defaults That Bite
A variable, buffer or register that starts in the wrong state can quietly decide who is authenticated. Examples from software and hardware, and the fixes MITRE lists.
Oct 18, 20263 min read
Application Security
CWE-141 Improper Neutralization of Parameter/Argument Delimiters
Unneutralized argument separators let input split one parameter into several. See the pattern, the impact on integrity, and practical ways to prevent it.
Oct 18, 20262 min read
Application Security
CWE-140 Improper Neutralization of Delimiters: Causes and Fixes
Unescaped field separators, line breaks and terminators let attackers add records or privileges. Learn the pattern, how to test for it and how to fix it.
Oct 18, 20264 min read
Application Security
CWE-14 Compiler Removal of Code to Clear Buffers: Dead Store Trap
You wipe a password buffer, and the optimizer deletes the wipe. How CWE-14 leaves secrets in memory, why testing misses it, and what to use instead of memset.
Oct 18, 20265 min read
Application Security
CWE-1395 Dependency on a Vulnerable Third-Party Component
Your product inherits every known flaw in the components it ships. What CWE-1395 covers, how to find vulnerable dependencies, and the lifecycle habits that keep them in check.
Oct 18, 20264 min read
Application Security
CWE-1394 Use of Default Cryptographic Key: Shared Keys, Shared Risk
A default key shared across devices or installs turns encryption and authentication into a formality. What CWE-1394 means and how to keep keys unique.
Oct 18, 20262 min read
Application Security
CWE-1393 Use of Default Password: Fix It Before It Ships
Default passwords simplify setup and invite attackers. See what CWE-1393 covers, the devices it has hit, and the mitigations MITRE rates highest.
Oct 18, 20262 min read
Application Security
CWE-1392 Use of Default Credentials: Why Defaults Get Exploited
Default passwords and keys make installs easy and attacks easier. What CWE-1392 covers and how to make your product refuse to run on a shared default.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.