Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-1945 lets a PyTorch model with altered ZIP header bits evade picklescan before 0.0.23. Upgrade to 0.0.23 and load models with weights_only.
CVE-2025-1909 lets attackers sign in as any user through Apple login in BuddyBoss Platform Pro up to 2.7.01. Update to 2.7.10 or later and verify the fix.
CVE-2025-1906 is a medium SQL injection in PHPGurukul Restaurant Booking. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1903 is a high SQL injection in Codezips Online Shopping Website. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1902 is a high SQL injection in PHPGurukul Student Record System. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1901: high SQL injection in PHPGurukul Restaurant Booking 1.0. No fixed version is named. Use prepared statements and restrict access to the page.
CVE-2025-1900: high SQL injection in PHPGurukul Restaurant Booking 1.0. No fixed version is named. Use prepared statements and restrict access to the page.
CVE-2025-1894: high SQL injection in PHPGurukul Restaurant Booking 1.0. No fixed version is named. Use prepared statements and restrict access to the page.
CVE-2025-1890 is a medium severity unrestricted file upload in shishuocms 1.1. No fixed version is named, so restrict uploads and check the project page.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
