Application Security
CWE-9 Weak Access Permissions for EJB Methods Explained
Granting the ANYONE role on EJB methods signals access control that was never fully designed. What CWE-9 is and how to tighten it.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-89 SQL Injection: How It Happens and How to Fix It
SQL injection turns user input into database commands. This guide covers CWE-89 with vulnerable and fixed code in Python, Java and Node, plus MITRE's mitigations and detection methods.
Oct 18, 20266 min read
Application Security
CWE-88 Argument Injection: How It Happens and How to Fix It
Even without a shell, an attacker who adds an extra option to a command can change what it does. This guide covers CWE-88, with vulnerable and fixed code.
Oct 18, 20265 min read
Application Security
CWE-87 Alternate XSS Syntax: Unusual Script Forms and Fixes
Script can be written in syntaxes a filter never expected. CWE-87 covers why you canonicalize input and check it against an allowlist.
Oct 18, 20262 min read
Application Security
CWE-863 Incorrect Authorization: Why a Check Still Fails
The authorization check exists but is wrong. CWE-863 explained with case sensitivity bugs, unchecked return values and AI platform examples from real CVEs.
Oct 18, 20264 min read
Application Security
CWE-862 Missing Authorization: How It Happens and How to Fix It
CWE-862 is the endpoint that never asks whether you are allowed. Causes, real CVE patterns, how to test for it and the fixes MITRE recommends.
Oct 18, 20265 min read
Application Security
CWE-86 Invalid Characters in Web Identifiers: XSS Bypass
A null byte in the middle of a scheme can fool a filter while browsers still run the script. CWE-86 explains the gap and the encoding fix.
Oct 18, 20262 min read
Application Security
CWE-85 Doubled Character XSS: Why One-Pass Filters Fail
Doubling a character can sneak script past a filter that removes it once. CWE-85 shows why you canonicalize first and use allowlists.
Oct 18, 20262 min read
Application Security
CWE-843 Type Confusion: How It Happens and How to Fix It
Type confusion treats memory or a value as the wrong type. CWE-843 explained with C unions, PHP array parameters and the CVEs MITRE links to it.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.