Security
jQuery Cookie: Why jquery.cookie Is Deprecated and What to Use Now
The jquery.cookie plugin is abandoned and carries a known prototype-pollution vulnerability. Here is what changed and how to migrate to js-cookie.
Apr 14, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
What Is a DTO (Data Transfer Object)? Security Notes for Java and Beyond
A DTO is a plain object that carries data across a boundary. Used well it is also one of your best defenses against mass assignment and data over-exposure.
Apr 14, 20265 min read
Security
The Snyk Logo: The Story Behind Patch the Guard Dog
The Snyk logo is a friendly Doberman named Patch, and the choice of a guard dog says more about the company's positioning than a wordmark ever could.
Apr 14, 20265 min read
Security
Vulnerability Meaning in Telugu: The Term Explained for Security Teams
The vulnerability meaning in Telugu is durbalatvam, a weakness that can be exploited. Here is the translation plus what the word actually signifies in software security.
Apr 14, 20266 min read
Security
@testing-library/jest-dom: What It Does and How to Keep It Secure
@testing-library/jest-dom is a dev-only matcher library that is low risk to your production security, provided you keep it out of your runtime bundle and patched.
Apr 14, 20265 min read
Security
CVE-2023-22081: The Oracle Java JSSE Denial-of-Service Flaw
CVE-2023-22081 is a Java SE and GraalVM vulnerability in the JSSE component that can cause a partial denial of service over HTTPS. Here is what to patch.
Apr 14, 20265 min read
Security
What Is Snyk Code? A Guide to the SAST Often Misspelled "Synk Code"
"Synk Code" is a common misspelling of Snyk Code, Snyk's developer-first SAST engine. Here is what it scans, how DeepCode AI works, and where it fits.
Apr 14, 20266 min read
Security
CVE-2022-40152: Woodstox XML Parsing Denial of Service
CVE-2022-40152 lets malicious XML with deeply nested DTD content crash Woodstox-based parsers via stack overflow. Here is the root cause, affected versions, and how to remediate it.
Apr 13, 20265 min read
Security
Secure Session Management: A Practical Guide for Web Apps
Secure session management comes down to a handful of decisions about cookies, storage, expiry, and rotation. Get those right and you close off most session-based attacks.
Apr 13, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.