Application Security
CWE-779 Logging of Excessive Data: When Logs Hide Attacks
Too much logging fills disks and buries the signal. See how CWE-779 turns noisy logs into cover for attackers and how to log with intent.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-778 Insufficient Logging: What Your Logs Must Record
If failed logins and other security events are not logged, attacks go unseen. Learn what CWE-778 means, where it hides, and what to log.
Oct 18, 20263 min read
Application Security
CWE-777 Regular Expression without Anchors: Validation Bypass
A regex allowlist that is not anchored only checks that a good string appears somewhere. See how CWE-777 lets bad input through and how to fix it.
Oct 18, 20263 min read
Application Security
CWE-776 XML Entity Expansion (Billion Laughs): How to Stop It
A few hundred bytes of XML can eat all your memory. Learn how CWE-776 recursive entity expansion works and how to turn it off in common parsers.
Oct 18, 20264 min read
Application Security
CWE-775 Missing Release of File Descriptor or Handle: Fixing Leaks
A file descriptor that is never closed is a small leak with a big effect. See how CWE-775 leads to denial of service and how to close handles on every code path.
Oct 18, 20263 min read
Application Security
CWE-774 Allocating File Descriptors Without Limits or Throttling
A server that opens a descriptor for every request with no cap lets one client starve the rest. See the limits and throttles that prevent it.
Oct 18, 20262 min read
Application Security
CWE-773 Missing Reference to Active File Descriptor or Handle
When code loses track of an open file descriptor it can never close it, and the process slowly runs out. Learn how it happens and how to cap the damage.
Oct 18, 20262 min read
Application Security
CWE-772 Missing Release of Resource After Effective Lifetime
Leaked sockets, file handles and memory slowly starve a service. See real cases, how to find leaks, and patterns that guarantee release on every path.
Oct 18, 20264 min read
Application Security
CWE-771 Missing Reference to Active Allocated Resource
Lose the last reference to a resource that needs explicit cleanup and it can never be reclaimed. Learn how this drains pools and how to keep control.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.