Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A 31.5 KiB MessagePack payload can force about 114.7 MiB of allocations. Fixed in MessagePack 2.5.303 and 3.1.9, but NuGet will not pull the fix in for you.
Jenkins' 2 September 2026 advisory fixes a deserialization chain to the Script Console, a CSRF token leak and session fixation. Upgrade to 2.580 or LTS 2.568.3.
Jenkins' 16 September 2026 advisory fixes sandbox bypasses that let anyone who can write a Pipeline run code on the controller. Script Security 1415, the fix from 2 September, is affected.
Adobe's October 2026 Commerce bulletin fixes 11 CVEs, including a pre-auth CVSS 10.0 template injection. You also still need September's CVE-2026-75650 hotfix.
A crafted HTTP request to NX-API can run code as root on Nexus 3000 and 9000 switches. NX-API is off by default, so the first job is finding where automation turned it on.
Citrix's 8 October bulletin fixes a CVSS 9.5 memory overflow in NetScaler ADC and Gateway SAML. Fixed builds are 14.1-73.46 and 13.1-64.29, newer than September's fixes.
Broadcom fixed a CVSS 9.3 VMXNET3 integer overflow and an HGFS stack overflow that let a guest admin run code on the host. Upgrade developer laptops to 26H1u1.
Fortinet's October 2026 FortiSIEM advisory lists only 7.5.0 as affected. The CVE record also lists 7.0 through 7.4. Here is how to handle the gap and the port 27918 workaround.
Two Cisco advisories on 7 October 2026 fix eight flaws in License On-Prem, formerly SSM On-Prem, including an unauthenticated admin password reset. Target release 10-202609.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
