Application Security
CWE-353 Missing Support for Integrity Check in Protocols
CWE-353 is a protocol with no checksum, so nobody can tell whether data changed in transit. Here is what that costs and what to add.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-352 Cross-Site Request Forgery: How It Works and How to Fix It
CSRF makes a logged in user's browser send a request they never intended. Learn how it works, a Flask example, and the defenses MITRE lists.
Oct 18, 20265 min read
Application Security
CWE-351 Insufficient Type Distinction: Confusing Two Things
CWE-351 happens when code cannot tell different kinds of elements apart, such as user clicks and scripted ones. Learn the pattern and the review habits that catch it.
Oct 18, 20263 min read
Application Security
CWE-350 Reliance on Reverse DNS for Security Decisions
CWE-350 is trusting a hostname from reverse DNS to grant access. Attackers who control the DNS for their IP can say anything. Here is the fix.
Oct 18, 20264 min read
Application Security
CWE-35 Path Traversal with '.../...//' and Filter Collapse
When a filter strips dot-dot-slash once, odd sequences like '.../...//' collapse into the very thing it removed. How CWE-35 works.
Oct 18, 20262 min read
Application Security
CWE-349 Untrusted Data Riding Along With Trusted Data
CWE-349 is a parser that trusts everything inside a trusted package, including the parts nobody vouched for. Signed data with extra content is the classic case.
Oct 18, 20263 min read
Application Security
CWE-348 Use of Less Trusted Source: Pick the Source You Can Verify
CWE-348 is reading data from the weaker of two sources, like a client supplied IP header over the real connection address. Here is the pattern and the fix.
Oct 18, 20263 min read
Application Security
CWE-347 Improper Verification of Cryptographic Signature
CWE-347 is signatures that are skipped or checked wrongly. Learn the common mistakes, a JWT example in Python, and how to verify properly.
Oct 18, 20264 min read
Application Security
CWE-346 Origin Validation Error: Check Who Is Talking
CWE-346 is trusting data or messages without verifying where they came from. DNS cache poisoning, Mark-of-the-Web gaps and postMessage bugs share the root.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.