Questions
Status
String concatenation in SQLMediumCode reviewCode reviewMedium25 mininnerHTML with user inputMediumCode reviewCode reviewMedium20 minShell injection via filenameMediumCode reviewCode reviewMedium20 minPing endpoint command injectionMediumCode reviewCisco styleCode reviewCisco styleMedium20 minPassword hash reuses global saltMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium20 minHardcoded API keys in sourceMediumCode reviewStripe styleCode reviewStripe styleMedium20 minToken check middleware for the API gatewayMediumCode reviewStripe styleCode reviewStripe styleMedium20 minAPI key comparison timing-sensitiveMediumCode reviewStripe styleCode reviewStripe styleMedium25 minUnescaped HTML injectionMediumCode reviewMeta styleCode reviewMeta styleMedium20 minSQL injection in sort columnMediumCode reviewCode reviewMedium20 minSQL injection in ORDER BYMediumCode reviewCode reviewMedium22 minSHA256 replaces password hashingMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium25 minXSS in search results rendererMediumCode reviewGoogle styleCode reviewGoogle styleMedium20 minSignature check on the payment webhookMediumCode reviewStripe styleCode reviewStripe styleMedium15 minProduction password hardcoded in sourceMediumCode reviewCode reviewMedium20 minSort column injectionMediumCode reviewCode reviewMedium25 minSession role client-writableMediumCode reviewCode reviewMedium25 minQuery string unescapedMediumCode reviewCode reviewMedium16 minComment HTML injectionMediumCode reviewGoogle styleCode reviewGoogle styleMedium18 minJWT secret hardcoded in fallbackMediumCode reviewCode reviewMedium18 minSQL injection in queryMediumCode reviewCode reviewMedium14 minLogin SQL injectionMediumCode reviewCode reviewMedium20 minUser reads another user's invoiceMediumCode reviewStripe styleCode reviewStripe styleMedium18 minJWT secret hardcodedMediumCode reviewCode reviewMedium15 minTransfer CSRF unprotectedMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium18 minLogin redirect open redirectMediumCode reviewCode reviewMedium15 minCharge logs card dataMediumCode reviewStripe styleCode reviewStripe styleMedium15 minMongoDB query accepts plaintext passwordMediumCode reviewCode reviewMedium18 minOverly permissive CORS with credentialsMediumCode reviewStripe styleCode reviewStripe styleMedium18 minAES encryption uses ECB modeMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium25 minMD5 with global saltMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium20 minWeak random token generationMediumCode reviewStripe styleCode reviewStripe styleMedium20 minTLS verification disabledMediumCode reviewStripe styleCode reviewStripe styleMedium22 minJWT parsed without signature verificationMediumCode reviewCode reviewMedium22 minDownload handler for user data exportsMediumCode reviewCode reviewMedium20 minReDoS vulnerability in email regexMediumCode reviewCode reviewMedium25 min
Shortest path unweighted graphMediumWrite codeWrite codeMedium25 minRelay activation timeMediumWrite codeAmazon styleWrite codeAmazon styleMedium30 minLargest connected regionMediumWrite codeAmazon styleWrite codeAmazon styleMedium25 minLexicographically smallest task orderMediumWrite codeGoogle styleWrite codeGoogle styleMedium30 minShortest path weighted graphMediumWrite codeGoogle styleWrite codeGoogle styleMedium35 minMinimum spanning treeMediumWrite codeWrite codeMedium35 minLargest connected componentMediumWrite codeWrite codeMedium25 minRedundant edge in treeMediumWrite codeWrite codeMedium25 minClone graph with canonical idsMediumWrite codeMeta styleWrite codeMeta styleMedium30 minMinimum cable replug operationsMediumWrite codeWrite codeMedium30 minBottom view of binary treeMediumWrite codeAmazon styleWrite codeAmazon styleMedium25 minKth smallest element in BSTMediumWrite codeMeta styleWrite codeMeta styleMedium20 min