Missing rate limiting (authentication)

Hard3 min read