Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CAI 0.5.9 and below has command injection in an SSH tool that AI agents can call. The record lists no fix, so restrict or disable that tool.
WBCE CMS 1.6.4 and below generate passwords with PHP rand(), which is predictable. Upgrade to 1.6.5 and reset passwords created by the old code.
Homarr before 1.45.3 does not sanitize input in its LDAP search, letting a user reach other users groups. Upgrade to 1.45.3 if you use LDAP login.
CVE-2025-67288 claims code execution through a PDF upload in Umbraco CMS 16.3.3, but the supplier disputes it. Validate uploads and read both sides.
Inventory Management System 1.0 has remote SQL injection in fetchSelectedBrand.php, public exploit, no fix listed. Take it offline or use prepared SQL.
Inventory Management System 1.0 has remote SQL injection in editBrand.php, public exploit, no fix listed. Take it offline or use prepared queries.
RIOT OS 2025.07 has an IPv6 fragment reassembly overflow when gnrc_ipv6_ext_frag is built in. Update to 2025.10; the advisory rates it medium.
CSLA .NET before version 6 allows WcfProxy, which uses NetDataContractSerializer. Move to CSLA 6 or remove WcfProxy from the data portal config.
AzeoTech DAQFactory 20.7 Build 2555 and earlier has an out-of-bounds write that can run code. Upgrade to Release 21.1 and restrict .ctl file sources.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
