Application Security
CWE-113 HTTP Response Splitting: How It Happens and Fixes
CR and LF in an HTTP header let attackers write their own headers and bodies. CWE-113 explained, with MITRE's CVE examples and a fix.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1127 Compilation with Insufficient Warnings or Errors
Compiling with warnings off hides bugs the compiler would have caught for free. CWE-1127, what flags to check, and how to enforce them in CI.
Oct 18, 20263 min read
Application Security
CWE-1126 Variable Declared with Unnecessarily Wide Scope
A variable declared far from where it is used invites stale values and misuse. CWE-1126 explained, with a short example and simple fixes.
Oct 18, 20262 min read
Application Security
CWE-1125 Excessive Attack Surface: Count Your Entry Points
The more inputs and outputs an untrusted party can reach, the more places a flaw can hide. CWE-1125, how attack surface is measured, and how to shrink it.
Oct 18, 20263 min read
Application Security
CWE-1124 Excessively Deep Nesting: How to Flatten Your Code
Deeply nested branches hide edge cases from reviewers. CWE-1124 explained, with a before and after example using guard clauses.
Oct 18, 20262 min read
Application Security
CWE-1123 Excessive Use of Self-Modifying Code and Its Risks
Code that rewrites itself at runtime is hard to read, test and audit. What CWE-1123 covers and how to reduce reliance on it.
Oct 18, 20262 min read
Application Security
CWE-1122 Excessive Halstead Complexity: What the Metric Means
Halstead measures such as vocabulary size and volume flag code that is dense with distinct operators and operands. CWE-1122 explained simply.
Oct 18, 20262 min read
Application Security
CWE-1121 Excessive McCabe Cyclomatic Complexity Explained
Cyclomatic complexity counts independent paths through code. Past a threshold, review and testing suffer. CWE-1121 and how to bring scores down.
Oct 18, 20262 min read
Application Security
CWE-1120 Excessive Code Complexity: Measure It, Then Reduce It
Code that scores too high on a defined complexity metric is harder to review and can be slow. CWE-1120, its children, and practical ways to cut complexity.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.