Vulnerability Analysis
CVE-2015-9251: jQuery cross-domain AJAX XSS
CVE-2015-9251 lets attackers exploit jQuery's cross-domain AJAX handling to run arbitrary script. Learn affected versions, risk context, and fixes.
Jul 1, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAppSec
SCA Solution: How to Choose Software Composition Analysis
An SCA solution inventories your open-source dependencies and flags the ones with known vulnerabilities or risky licenses. Here is what separates a good one.
Jul 1, 20265 min read
Security
Is vite-plugin-static-copy Safe? Understanding CVE-2025-57753 and Path Traversal
vite-plugin-static-copy is a popular Vite asset plugin, but one version range shipped a directory traversal flaw. Here is what to know and how to patch.
Jul 1, 20265 min read
Concepts
What Is Software Composition Analysis (SCA)?
Software Composition Analysis (SCA) identifies the open source and third-party components in your code, then flags their known vulnerabilities and license risks. Here's how SCA works and what separates modern tools from legacy scanners.
Jul 1, 20266 min read
Security Guides
Flask Security Best Practices for 2026
Flask is minimal by design, which means the security decisions Django makes for you are decisions you own. Here is how to make them correctly.
Jul 1, 20265 min read
Container Security
Docker Image Security Best Practices
Every Docker layer you ship is attack surface you have to defend. Learn how to build lean, non-root, secret-free images that survive a registry scan and a real audit.
Jul 1, 20265 min read
DevSecOps
CI/CD Pipeline Security Best Practices for 2026
Your build pipeline is production-adjacent infrastructure with credentials to everything. Here are the CI/CD security practices — mapped to the OWASP Top 10 CI/CD risks — that actually close the gaps attackers use.
Jul 1, 20265 min read
AI Security
AI Agent Tool-Use Security: Locking Down What Agents Can Do
The moment you give an LLM tools, it stops being a chatbot and becomes an actor in your systems. Tool-use security is about making sure a compromised agent hits a wall instead of a credential.
Jul 1, 20266 min read
Security
regenerator-runtime: What It Is and Whether to Worry
regenerator-runtime shows up in thousands of dependency trees, usually transitively. Here is what it does, why it is there, and how to think about its risk.
Jul 1, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.