Application Security
CWE-1070 Serializable Element Containing Non-Serializable Items
A serializable field that holds a non-serializable member will fail when written. CWE-1070 explains the problem and how to avoid it.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-107 Struts Unused Validation Form: A Maintenance Signal
An unused Struts validation form means validation logic has fallen out of date. CWE-107 explained and how to clean it up safely.
Oct 18, 20262 min read
Application Security
CWE-1069 Empty Exception Block: Why Swallowed Errors Hurt
An empty catch block hides failures and lets the program continue in a bad state. CWE-1069 with Java and Python examples and a fix checklist.
Oct 18, 20264 min read
Application Security
CWE-1068 Implementation Inconsistent with Documented Design
When the code no longer matches the design document, reviewers trust the wrong picture. CWE-1068 explains the drift and how to catch it.
Oct 18, 20262 min read
Application Security
CWE-1067 Excessive Sequential Searches of a Data Resource
SQL queries that skip indexes force full table scans. CWE-1067 explains how this slows a product and how to check your queries.
Oct 18, 20262 min read
Application Security
CWE-1066 Missing Serialization Control Element
A serializable class with no serialization method can fail at runtime. CWE-1066 explains the reliability issue and how to handle it.
Oct 18, 20262 min read
Application Security
CWE-1065 Low-Level Resource Management in App Server Components
Components built for an application server should use its resource API, not low-level calls. CWE-1065 explains why and what to change.
Oct 18, 20262 min read
Application Security
CWE-1064 Functions with Too Many Parameters: Risks and Fixes
A long parameter list makes calls error prone and review slow. CWE-1064 cites 7 as a recommended maximum and shows how to refactor.
Oct 18, 20262 min read
Application Security
CWE-1063 Creating a Class Instance in a Static Code Block
Building objects inside a static initializer does work before it is needed. CWE-1063 explains the performance risk and a lazy alternative.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.