Security
A Practical Race Condition Example (and How to Fix It)
A race condition example is easiest to understand through a bank-balance check-then-act bug. Here is the anatomy, the exploit, and three ways to close it.
Mar 11, 20256 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Use-After-Free Vulnerability: How It Works and How to Prevent It
A use-after-free vulnerability happens when a program keeps using memory it already released. Here is why it is dangerous, how attackers exploit it, and how to catch it.
Mar 11, 20256 min read
Security
CVE-2023-34042: How the Spring Security XSD Permission Flaw Works
CVE-2023-34042 is a world-writable file permission issue in Spring Security's config JAR. Here is what actually breaks, who is affected, and how to remediate it.
Mar 11, 20256 min read
Security
https-proxy-agent: What It Does and How to Use It Safely
A practical security review of https-proxy-agent, the Node.js module that tunnels HTTPS through an HTTP proxy, plus the advisories worth knowing before you pin a version.
Mar 11, 20256 min read
Security
The Java Developer Kit Explained: Security Risks and How to Harden Your JDK
The Java Developer Kit is more than a compiler and runtime. Here is how to treat the JDK as part of your attack surface and keep it patched.
Mar 11, 20256 min read
Security
What Causes a Memory Leak in JavaScript (and How to Find One)
A memory leak in JavaScript happens when objects you no longer need stay reachable, so the garbage collector can never free them. Here is how they start and how to hunt them down.
Mar 11, 20256 min read
Security
What Is This Code? How to Read and Secure Unfamiliar Source
A practical method for answering "what is this code?" when you inherit an unfamiliar file, plus how to spot the security problems hiding inside it.
Mar 11, 20256 min read
Security
CVE-2023-45133: Babel's Arbitrary Code Execution Flaw Explained
CVE-2023-45133 lets crafted code execute arbitrary commands during Babel compilation. Here's who is at risk, why it scores 9.3, and how to patch it.
Mar 6, 20256 min read
Security
JavaScript Uncaught Exceptions: A Security Guide
A JavaScript uncaught exception is more than a crash — unhandled errors leak internal detail, break security flows midway, and hide attacks. Here is how to handle them safely.
Mar 5, 20256 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.