Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (12009)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3307)Developer Tools (2961)Compliance (2830)AI Security (1723)Supply Chain (1423)Supply Chain Security (1028)Industry Analysis (1005)Research (585)Security (532)Product (514)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (288)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (36)Engineering (29)Licensing (26)Ransomware (24)Tutorials (24)Kubernetes Security (22)SecOps (22)Guides (22)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Case Studies (16)Tool Reviews (16)Vulnerability Response (16)Risk Management (16)Agent Security (16)Incident Response (15)Security Concepts (15)Identity Security (15)Cryptography (15)Compliance & Frameworks (15)Industry Events (14)Security Strategy (13)Buyer Guides (12)Frameworks (12)Web Security (11)Dependency Security (11)Data Breach (11)Career (10)Security News (10)Enterprise (9)Company (9)Culture (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Secure Development (7)Industry Insights (7)Industry Trends (7)Zero-Day Exploits (7)Network Security (7)How-To Guide (7)Dependency Management (7)Vendor Comparison (6)Security Operations (6)Organizational Security (6)Developer Security (6)Industry (6)Dev Practices (6)Code Security (5)Breach Analysis (5)Cryptocurrency Security (4)Product Launch (4)Mobile Security (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Governance (3)Social Engineering (3)Hardware Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Regional Security (3)Startup Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Perspectives (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Emerging Threats (1)Threat Modeling (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

CVE-2026-73602: Critical Sandbox Escape in Flowise JavaScript

CVE-2026-73602 is a CVSS 9.9 sandbox escape in the Flowise JavaScript sandbox that lets authenticated users run code on the host. Upgrade to 3.1.3.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-73595: Dell Secure Connect Gateway Policy Manager Flaw

CVE-2026-73595 is a medium severity missing integrity check in Dell Secure Connect Gateway Policy Manager before 5.34.00.16 and 5.36. Apply Dell's update.

Oct 18, 20262 min read
Vulnerability Analysis

CVE-2026-73487: Critical Validator Bypass in Flowise Agents

CVE-2026-73487 is a CVSS 9.8 regex validator bypass in the Flowise CSV and Airtable agents that allows data theft and SSRF. Upgrade to 3.1.3.

Oct 18, 20264 min read
Vulnerability Analysis

CVE-2026-73373: Unrestricted SHTML Upload in Joomla Core

CVE-2026-73373 lets Joomla accept SHTML uploads that may execute on some servers. Affects 1.0.0 to 5.4.7 and 6.0.0 to 6.1.2. Upgrade to 5.4.8 or 6.1.3.

Oct 18, 20264 min read
Vulnerability Analysis

CVE-2026-73309: OAuth2 Authentication Bypass in XenForo

CVE-2026-73309 is a CVSS 7.4 OAuth2 token endpoint flaw in XenForo before 2.3.13 where empty secret values skip validation. Upgrade to 2.3.13.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-73253: Critical Hostname Check Flaw in Mongoose TLS

CVE-2026-73253 is a CVSS 9.1 hostname verification bypass in Mongoose built-in TLS where a wildcard matches across subdomain levels. Upgrade to 7.22.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-73251: Critical TLS Verification Bypass in Mongoose

CVE-2026-73251 is a CVSS 9.1 TLS flaw in the Mongoose library where clients using a CA bundle skip signature checks. Upgrade to Mongoose 7.23.

Oct 18, 20264 min read
Vulnerability Analysis

CVE-2026-73242: Critical Out-of-Bounds Write in FreeRDP Kerberos

CVE-2026-73242 is a CVSS 9.1 heap overflow in FreeRDP Kerberos token decryption during NLA that a malicious server can trigger. Upgrade to 3.30.0.

Oct 18, 20265 min read
Vulnerability Analysis

CVE-2026-73032: Critical Code Execution in PapersGPT for Zotero

CVE-2026-73032 is a CVSS 9.6 flaw in PapersGPT for Zotero 0.6.1 that runs model output through eval. Check the project releases for a fixed build.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

We email you a link to confirm, and only then add you to the list. Unsubscribe in one click. Privacy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.