Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (12009)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1022)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

CVE-2021-23343: ReDoS in path-parse

CVE-2021-23343 is a ReDoS vulnerability in path-parse before 1.0.7 that lets crafted path strings stall Node.js apps. Here's how it works and how to fix it.

Jul 1, 20267 min read
Vulnerability Analysis

CVE-2018-1000620: ReDoS in marked markdown parser

A ReDoS flaw in the marked Markdown parser (CVE-2018-1000620) let crafted input stall Node.js services. Here's the impact, fix, and how to catch it in your dependency tree.

Jul 1, 20268 min read
Vulnerability Analysis

Inside the GitHub Advisory Database: how vulnerability re...

How vulnerability records actually get into the GitHub Advisory Database — curation, CNA status, GHAS enrichment, and the gaps in severity and version data teams should watch for.

Jul 1, 20267 min read
Vulnerability Analysis

CVE-2022-21680: ReDoS in marked via block token regexes

CVE-2022-21680: how a ReDoS in marked's block-tokenizer regexes could let attackers freeze Markdown-rendering services, plus affected versions, fix, and mitigation steps.

Jun 30, 20267 min read
Vulnerability Analysis

CVE-2022-21681: Second ReDoS flaw in marked

CVE-2022-21681 is a ReDoS flaw in marked's inline tokenizer that lets crafted Markdown hang parsing. What's affected, severity, and how to remediate.

Jun 30, 20266 min read
Vulnerability Analysis

CVE-2022-0235: node-fetch forwards sensitive headers on r...

CVE-2022-0235: node-fetch forwarded cookie and authorization headers across cross-origin redirects. Affected versions, exploitability context, and remediation steps.

Jun 30, 20268 min read
Vulnerability Analysis

CVE-2022-0155: follow-redirects leaks Proxy-Authorization...

CVE-2022-0155: follow-redirects leaked Proxy-Authorization headers across hosts on redirect, exposing proxy credentials via axios and other widely used npm HTTP clients.

Jun 30, 20268 min read
Vulnerability Analysis

CVE-2022-0536: follow-redirects leaks Authorization heade...

CVE-2022-0536 let follow-redirects forward Authorization headers to third-party hosts on cross-domain redirects, exposing tokens and credentials.

Jun 30, 20268 min read
Vulnerability Analysis

CVE-2023-26159: SSRF/credential exposure in follow-redire...

CVE-2023-26159 shows how flawed URL parsing in follow-redirects let attackers trigger SSRF and leak Authorization headers across unintended hosts.

Jun 30, 20267 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.