Security
Mobile Number Validation in JavaScript: A Security-Aware Guide
Mobile number validation in JavaScript is easy to get wrong with a naive regex. Here is how to validate phone numbers correctly, safely, and without ReDoS.
Mar 5, 20255 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
CVE-2020-25638: SQL Injection in Hibernate ORM Explained
CVE-2020-25638 is a SQL injection flaw in hibernate-core that surfaces when SQL comments are enabled and literals are used in JPA Criteria queries. Here is who is affected and how to remediate it.
Mar 5, 20255 min read
Security
What Is an EPSS Score? A Practical Security Guide
A practical guide to the EPSS score: what it measures, how the score and percentile differ, and how to use EPSS to prioritize which CVEs to fix first.
Mar 4, 20256 min read
Security
What's a Zero-Day? The Vulnerability Defenders Fear Most
A zero-day is a vulnerability that attackers know about before the vendor has a fix, leaving defenders with zero days to patch. Here is what the term means and how teams respond.
Mar 3, 20255 min read
Security
Buffer Streams: Handling Binary Data Safely in Node.js
Buffer streams are how Node.js moves binary data without loading it all into memory. Here is how they work and the security bugs that hide in buffer handling.
Mar 3, 20256 min read
Security
Hacking for Dummies: A Plain-English Guide to How Attacks Work
A beginner-friendly, defensive introduction to hacking: what the word means, how attackers actually break in, and how to start thinking like a defender.
Feb 27, 20256 min read
Security
Source Code Auditing: How to Find Bugs Before Attackers Do
Source code auditing is the systematic review of code for security flaws. Here is how to run one, where automation fits, and what humans still do better.
Feb 27, 20256 min read
Security
Code Quality Analysis and Security: Why Clean Code Is Safer Code
Code quality analysis and security testing overlap more than teams realize. Here is how measuring quality catches whole classes of vulnerabilities early.
Feb 25, 20256 min read
Security
XXE Fix in Java: How to Harden Every XML Parser
The XXE fix in Java is the same idea across every parser — turn off DOCTYPE and external entities before you feed it untrusted XML. Here are the exact settings for each JDK XML API.
Feb 25, 20256 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.