Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Qwik CVE-2026-84994 let one request crash a Node server through a deserialized thenable. The fix, a lab, and a Qwik 2 version-string trap for scanners.
Go 1.27.2 and 1.26.9 fix 15 CVEs, eight in net/http. Fixes only apply after a rebuild. What changed, the x/net v0.60.0 half, and a binary scanner.
Appium's second Zip Slip fix: clean entry names, a symlink entry, and a file written through it. The fix, a lab across extractors, and a lockfile check.
Talos support bundles included private registry credentials. Why redacting 'sensitive types' fails open, and a script to scan any bundle before sharing.
SFTPGo checked file filters on the copy target, not the source, so denied files could be copied and read. The fix, the two-path pattern and an audit.
CVE-2020-0646 affects Microsoft .NET Framework and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-0604 affects Microsoft SharePoint and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-0601 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-34448 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
