Application Security
CWE-475 Undefined Behavior for Input to an API
Some APIs only behave predictably when a control parameter has a specific value. CWE-475 is about calling them with anything else.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-474 Functions with Inconsistent Implementations
The same function can behave differently across operating systems and versions. CWE-474 covers the portability traps that turn into security bugs.
Oct 18, 20262 min read
Application Security
CWE-473 PHP External Variable Modification Explained
When PHP variables can be set from query strings or cookies, attackers can overwrite what your code assumed was internal. Learn the pattern and how to avoid it.
Oct 18, 20263 min read
Application Security
CWE-472 Hidden Form Fields and Cookies: Web Parameter Tampering
Prices in hidden fields and roles in cookies get edited by the people holding them. CWE-472 explains the tampering and the server side checks that stop it.
Oct 18, 20264 min read
Application Security
CWE-471 Assumed-Immutable Data: Why Client Values Can't Be Trusted
Hidden fields, cookies and headers feel fixed but the client controls them. CWE-471 covers data you assumed could not change and how to protect it.
Oct 18, 20263 min read
Application Security
CWE-470 Unsafe Reflection: How It Happens and How to Fix It
Unsafe reflection lets outside input pick which class or method your code runs. Here is how the bug appears in Java and PHP and how to close it with allowlists.
Oct 18, 20264 min read
Application Security
CWE-47 Leading Space Path Equivalence Explained
CWE-47 covers a space at the start of a filename that confuses path checks. What it is and how to validate names properly.
Oct 18, 20262 min read
Application Security
CWE-469 Use of Pointer Subtraction to Determine Size
Subtracting two pointers only means something inside one memory chunk. CWE-469 explained with the linked list size bug and the index variable fix.
Oct 18, 20263 min read
Application Security
CWE-468 Incorrect Pointer Scaling in C and C++
Adding 1 to a typed pointer moves it by the element size, not one byte. CWE-468 explained with MITRE's example, impact and mitigations.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.