Application Security
CWE-32 Path Traversal with the Triple Dot '...' Sequence
On some Windows systems three dots act like two parent hops, and filters that expect only two dots miss it. How CWE-32 works and how to fix it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-319 Cleartext Transmission of Sensitive Information: Fix Guide
Sending passwords or tokens over an unencrypted channel lets anyone on the path read them. How CWE-319 shows up, how to test for it and how to close it.
Oct 18, 20264 min read
Application Security
CWE-318 Cleartext Secrets in Executables: Why Binaries Are Not Vaults
Secrets compiled into a binary can be read by anyone who has the binary. Here is how CWE-318 happens and how to keep credentials out of your executables.
Oct 18, 20263 min read
Application Security
CWE-317 Cleartext Storage of Sensitive Information in a GUI
A password field that looks masked can still hand over its contents to a local program. Learn why hidden GUI values leak and how to avoid keeping secrets there.
Oct 18, 20262 min read
Application Security
CWE-316 Cleartext Storage of Sensitive Information in Memory
Secrets left in process memory can reach swap files, core dumps and other attackers. Learn when it matters, how real products got caught and how to limit exposure.
Oct 18, 20263 min read
Application Security
CWE-315 Cleartext Storage of Sensitive Information in a Cookie
Cookies live on the user's machine and travel with every request. Putting passwords or auth data in them in cleartext hands them to anyone with a browser tool.
Oct 18, 20263 min read
Application Security
CWE-314 Cleartext Storage in the Windows Registry
Registry keys are easy to read, so passwords stored there in cleartext are easy to take. Learn how to check your software and where secrets should live instead.
Oct 18, 20262 min read
Application Security
CWE-313 Cleartext Storage in a File or on Disk
Passwords in config files and unencrypted copies of messages on disk are readable by anyone with file or raw disk access. Here is how to spot and remove them.
Oct 18, 20263 min read
Application Security
CWE-312 Cleartext Storage of Sensitive Information: Fix Guide
Passwords, tokens and personal data stored unencrypted are one read away from exposure. See where cleartext hides, how to find it and how to store secrets properly.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.