Blog
News & Insights
Updates from the SafeWeave team on security, engineering, and product development.
AI Security Patches Fail 74% of the Time: 6,080 Tested
1Password's Off-by-1 Labs had ChatGPT 5.5 and Claude Opus 4.8 write 6,080 patches for six real CVEs. Only 26.0% were complete fixes that preserved application behavior. Here is the failure mode, in code you will recognize.
Read articleGitSpawn: Claude Code Runs Untrusted Repo Code Before You Type
A repository sent to you as a zip can run commands on your machine the moment you open it with Claude Code, Cursor or Codex. Here is how GitSpawn works, what is still unpatched, and the one check that actually stops it.
Read articleCVE-2026-35603: Cursor Still Trusts a World-Writable Folder
Claude Code, Cursor, Codex CLI and Gemini CLI on Windows all load machine-wide config from a ProgramData folder any standard user can write to. Anthropic fixed it and got CVE-2026-35603 assigned. Three of the four vendors had not fixed it at disclosure.
Read articleSlopsquatting: Why Cursor Recommends Packages Attackers Own
AI editors invent package names and attackers register them. Your dependency scanner reports zero findings because a package published three weeks ago has no CVE history. Here is the five-second check that actually catches slopsquatting.
Read articleThe Command Injection Fix Cursor Writes Still Runs Code (CWE-78)
Ask Cursor to fix a command injection bug and it writes a regex blocklist of shell metacharacters. The payload that defeats it, git clone ext::sh -c, contains none of them and still runs code on your machine. Here is why blocklists fail for CWE-78 and the three-part fix that holds.
Read articleAgentjacking: Your Sentry DSN Lets Attackers Hijack Cursor
Attackers can inject commands into Cursor and Claude Code by POSTing fake error events to your Sentry project using the public DSN in your JavaScript bundle. Tenet Security found 2,388 exposed organizations and an 85 percent hijack success rate. Here is the attack and the fix.
Read articleThe IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)
Ask an AI editor to fix an IDOR and it scopes the GET route to the current user, correctly, then leaves PATCH, DELETE and the list endpoint on primary-key lookups. The unscoped list endpoint is the worse half.
Read articleThe Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)
Ask an AI editor to fix a path traversal bug and it writes path.resolve plus a containment check. That check is pure string math, it never touches the disk, and a symlink inside your upload directory walks straight through it.
Read articleThe SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)
Ask an AI editor to fix an SSRF and it writes a DNS lookup, an IP range check, then fetch. That check does not hold, because Node resolves the hostname again at connect time and DNS rebinding walks straight past it.
Read articleBest AI Code Security Platforms for Scanning AI-Generated Code Before Release
What Is an AI Code Security Platform? An AI code security platform is a specialized category of application security tooling designed to detect, analyze, and…
Read articleCursor Learned to Code From Tutorials That Skip Security
AI editors learned to code from tutorials, and tutorials cut security controls on purpose because every control is invisible on success. That is why Cursor writes SQL injection it can correctly identify ninety seconds later.
Read articleShift-Left Security Is Dead When Cursor Writes the Code
Shift-left security worked because pipeline position tracked developer context. AI code generation broke that link, and pre-commit now fires hundreds of generated lines too late.
Read articleWhy Cursor Installs npm Packages With Known CVEs
Cursor and other AI editors pin package versions frozen at their training cutoff, so the version they call "latest" can already carry a known CVE the day you install it. Here is why it happens and how npm audit catches it.
Read articleWhy Deleting a Hardcoded Secret Does Not Fix It (CWE-798)
AI editors paste live API keys and secrets straight into your source, and deleting the line later does not undo the exposure. Here is why it happens and the two-line fix.
Read articleWhy Cursor Writes IDOR Into Your API Routes (CWE-639)
AI editors add a login check to your API routes but skip the ownership check, so any logged-in user can read another user's data by changing the ID in the URL. Here is the one-line fix for IDOR (CWE-639).
Read articleWhy Cursor Writes Login Endpoints With No Rate Limiting
AI editors generate login endpoints with correct bcrypt hashing and proper JWTs, then leave out any limit on attempts (CWE-307). Here is why it happens and the two-layer fix.
Read articleWhy Cursor Generates Prototype Pollution in Deep Merge Functions
AI editors write recursive object merge functions without key guards, turning __proto__ and constructor.prototype into open write channels. Here is the pattern, the attack, and the two-line fix.
Read articleWhy Cursor Keeps Generating Wildcard CORS Headers in Your API
A CORS "fix" that echoes the Origin header back to the browser instead of checking it against an allowlist lets any site make authenticated requests to your API. Here's the pattern AI editors keep generating, and the allowlist fix.
Read articleWhy Cursor Keeps Generating Insecure Random Session Tokens (CWE-330)
AI editors keep generating tokens with Math.random(), which is not cryptographically secure. Here is why it happens and how to fix it with crypto.randomBytes.
Read articleBest AI Coding Assistants Security: Why Developers Should Use SafeWeave
Learn how AI coding assistants improve developer productivity and why scanning AI-generated code with SafeWeave helps catch vulnerabilities before production.
Read articleSafeWeave vs mcpscan.ai: MCP Server Security vs AI Code Security
mcpscan.ai audits MCP servers. SafeWeave scans the code your AI writes. These solve different problems — here is when you need each, and why most teams need both.
Read articleMCP Server Security vs AI Code Security — Why You Need Both
The MCP security landscape has two distinct threat models. Most teams focus on server security but miss the bigger risk: vulnerabilities in AI-generated code.
Read articleSafeWeave vs Snyk Agent Scan: Which MCP Security Tool Should You Use?
Snyk agent-scan audits your MCP configurations. SafeWeave IS an MCP tool with 8 security scanners. A detailed comparison of approach, coverage, and pricing.
Read articleSafeWeave vs SonarQube: The Best Code Security Tool for Vibe Coders in 2026
SonarQube was built for a pre-AI era. SafeWeave was built for vibe coders. Compare architecture, security coverage, developer experience, and pricing side by side.
Read articleSafeWeave vs Snyk: Which Security Scanner Is Best for AI-Native Development?
A thorough comparison of SafeWeave and Snyk across scanning coverage, developer experience, AI-native workflow integration, pricing, and more. Find out which security scanner fits modern AI-assisted teams.
Read articleThe Hidden Security Risks of AI-Generated Code: A Comprehensive Guide for Developers
LLMs produce syntactically correct but semantically insecure code at scale. Learn what vulnerabilities they commonly introduce and how to mitigate them.
Read articleMCP Security Scanning Explained: How Model Context Protocol Is Revolutionizing Code Security
The Model Context Protocol lets AI assistants call external tools natively. Here is how MCP enables real-time vulnerability detection inside Cursor, Claude Code, and VS Code.
Read articleSAST vs DAST: The Complete Guide to Application Security Testing in 2025
Understand the differences between static and dynamic analysis, when to use each, and how modern tools combine both for comprehensive coverage.
Read articleOWASP Top 10 for AI-Assisted Development: Vulnerabilities Your Copilot Won't Catch
A practical walkthrough of how each OWASP Top 10 vulnerability manifests in AI-generated code, with real examples and remediation strategies.
Read articleShift-Left Security in the AI Era: Why Traditional DevSecOps Isn't Enough
Traditional shift-left assumes humans write code. When AI generates it, scanning needs to happen in real-time inside the IDE.
Read articleThe Ultimate Guide to Secrets Detection in Code: Preventing API Key Leaks and Credential Exposure
API keys, tokens, and credentials leak into codebases every day. Learn how to detect, prevent, and remediate secret exposure in your projects.
Read articleContainer Security Scanning Best Practices: Securing Docker Images from Build to Production
From base image selection to runtime security, a comprehensive guide to scanning and securing your containerized applications.
Read articleDependency Vulnerability Scanning: How to Protect Your Software Supply Chain
Your code is only as secure as its dependencies. Learn how to scan for CVEs, manage transitive risks, and keep your supply chain safe.
Read articleInfrastructure as Code Security: Catching Misconfigurations Before They Reach Production
Terraform, CloudFormation, and Kubernetes manifests can contain critical misconfigurations. Learn how to scan and fix them before deployment.
Read articleSecurity Compliance for Startups: A Developer's Guide to SOC 2, HIPAA, and GDPR
Demystifying compliance frameworks for engineering teams. Practical steps to meet SOC 2, HIPAA, and GDPR requirements with automated security scanning.
Read article