Application Security
CWE-1177 Use of Prohibited Code: Banned Functions and Components
Teams ban unsafe functions and risky libraries, then ship them anyway. Here is how CWE-1177 happens and how to make the ban enforceable.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1176 Inefficient CPU Computation and Denial of Service
Slow algorithms are a performance bug until an attacker controls the input size. Then they become a denial of service. Here is how to spot and bound them.
Oct 18, 20263 min read
Application Security
CWE-1174 ASP.NET Improper Model Validation: A Short Guide
ASP.NET ships a model validation framework. If your actions ignore the result, invalid input flows straight through to your data layer.
Oct 18, 20262 min read
Application Security
CWE-1173 Improper Use of Validation Framework: Causes and Fixes
Your language or library already ships an input validation framework. Skipping it, or wiring it up wrong, leaves gaps that attackers find later in the code path.
Oct 18, 20264 min read
Application Security
CWE-117 Log Injection: Neutralizing Output Written to Logs
Logging external input verbatim lets attackers forge entries and mislead investigators. CWE-117 explained, with a Python fix.
Oct 18, 20263 min read
Application Security
CWE-1164 Irrelevant Code: Dead Code, Unused Setup and goto fail
Code that changes nothing can still mislead reviewers and hide real bugs. CWE-1164, its link to the Apple goto fail case, and how to find and remove it.
Oct 18, 20264 min read
Application Security
CWE-116 Improper Output Encoding: The Root of Many Injections
Missing or wrong output encoding lets data change the structure of messages between components. CWE-116 explained, with context-aware fixes.
Oct 18, 20264 min read
Application Security
CWE-115 Misinterpretation of Input and Why It Bites
A product that misreads an input in a security-relevant way can be fooled by it. CWE-115 explained with MITRE's examples and fuzzing advice.
Oct 18, 20262 min read
Application Security
CWE-114 Process Control: Untrusted Commands and Libraries
Process control means an attacker changes the command your program runs or the environment it runs in. CWE-114 explained, with fixes.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.