Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (12009)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3307)Developer Tools (2961)Compliance (2830)AI Security (1723)Supply Chain (1423)Supply Chain Security (1028)Industry Analysis (1005)Research (585)Security (532)Product (514)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (288)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (36)Engineering (29)Licensing (26)Ransomware (24)Tutorials (24)Kubernetes Security (22)SecOps (22)Guides (22)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Case Studies (16)Tool Reviews (16)Vulnerability Response (16)Risk Management (16)Agent Security (16)Incident Response (15)Security Concepts (15)Identity Security (15)Cryptography (15)Compliance & Frameworks (15)Industry Events (14)Security Strategy (13)Buyer Guides (12)Frameworks (12)Web Security (11)Dependency Security (11)Data Breach (11)Career (10)Security News (10)Enterprise (9)Company (9)Culture (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Secure Development (7)Industry Insights (7)Industry Trends (7)Zero-Day Exploits (7)Network Security (7)How-To Guide (7)Dependency Management (7)Vendor Comparison (6)Security Operations (6)Organizational Security (6)Developer Security (6)Industry (6)Dev Practices (6)Code Security (5)Breach Analysis (5)Cryptocurrency Security (4)Product Launch (4)Mobile Security (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Governance (3)Social Engineering (3)Hardware Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Regional Security (3)Startup Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Perspectives (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Emerging Threats (1)Threat Modeling (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Vulnerability Analysis

CVE-2026-34566: Stored DOM XSS in Page Management in CI4MS

CVE-2026-34566 is a critical stored DOM XSS in CI4MS page create and edit forms. Upgrade ci4ms to 0.31.0.0 or later and review existing page content.

Oct 18, 20262 min read
Vulnerability Analysis

CVE-2026-34565: Stored DOM XSS in Menu Posts in CI4MS

CVE-2026-34565 is a critical stored DOM XSS in CI4MS menu management for posts. Upgrade ci4ms to 0.31.0.0 or later and check your menu entries.

Oct 18, 20262 min read
Vulnerability Analysis

CVE-2026-34564: Stored DOM XSS in Menu Pages in CI4MS

CVE-2026-34564 is a critical stored DOM XSS in CI4MS menu management for pages. Upgrade ci4ms to 0.31.0.0 or later and check your menu entries.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-34563: Blind XSS via Backup Upload in CI4MS

CVE-2026-34563 is a critical blind XSS in CI4MS backup handling via the backup file name. Upgrade ci4ms to 0.31.0.0 and review existing backup entries.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-34562: Stored XSS in Company Settings in CI4MS

CVE-2026-34562 is a medium stored XSS in CI4MS company settings fields, set by admins. Upgrade ci4ms to 0.31.0.0 or later and review the stored values.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-34560: Blind XSS in Logs View in CI4MS

CVE-2026-34560 is a critical blind XSS in the CI4MS logs view that runs when an admin opens it. Upgrade ci4ms to 0.31.0.0 and review stored log entries.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-34559: Stored XSS via Blog Tags in CI4MS

CVE-2026-34559 is a critical stored XSS in CI4MS through blog tag names. Upgrade ci4ms to 0.31.0.0 or later and review existing tags for script content.

Oct 18, 20263 min read
Vulnerability Analysis

CVE-2026-34558: CI4MS Stored DOM XSS in Methods Management

CVE-2026-34558 is a stored DOM XSS in CI4MS Methods Management that runs in admin pages and navigation. Upgrade ci4-cms-erp/ci4ms to 0.31.0.0 or later.

Oct 18, 20262 min read
Vulnerability Analysis

CVE-2026-34557: CI4MS Stored XSS in Group and Role Management

CVE-2026-34557 is a critical stored XSS in CI4MS group and role management that runs in admin views. Upgrade ci4-cms-erp/ci4ms to 0.31.0.0 or later.

Oct 18, 20262 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

We email you a link to confirm, and only then add you to the list. Unsubscribe in one click. Privacy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.