Questions
Status
AES uses static zero IVHardCode reviewCoinbase styleCode reviewCoinbase styleHard30 minDisplay name concatenated into SQLHardCode reviewCode reviewHard35 minDeep merge allows prototype pollutionHardCode reviewCode reviewHard30 minMarkdown sanitizer allows onclickHardCode reviewGoogle styleCode reviewGoogle styleHard22 minSource URL javascript protocolHardCode reviewGoogle styleCode reviewGoogle styleHard20 minJWT kid header injectionHardCode reviewCoinbase styleCode reviewCoinbase styleHard24 minUser search by emailHardCode reviewCode reviewHard22 minJSONB key injected into SQLHardCode reviewCode reviewHard24 minAES field encryptionHardCode reviewCoinbase styleCode reviewCoinbase styleHard22 minGCM message encryptionHardCode reviewCoinbase styleCode reviewCoinbase styleHard26 minGit clone from user URLHardCode reviewMicrosoft styleCode reviewMicrosoft styleHard24 minSettings patch creates arbitrary keysHardCode reviewCode reviewHard24 minHTML sanitizer output re-parsedHardCode reviewGoogle styleCode reviewGoogle styleHard22 minPing command injectionHardCode reviewCisco styleCode reviewCisco styleHard22 minUser update mass assignmentHardCode reviewCode reviewHard20 minSession token weak entropyHardCode reviewPayPal styleCode reviewPayPal styleHard20 minLogin accepts unlimited attemptsHardCode reviewCoinbase styleCode reviewCoinbase styleHard20 minAny authenticated user deletes accountsHardCode reviewSalesforce styleCode reviewSalesforce styleHard18 minORDER BY column injectionHardCode reviewCode reviewHard20 minXML parser enables external entitiesHardCode reviewCode reviewHard20 minTemplate string renders user inputHardCode reviewCode reviewHard22 minTiming attack in signature verificationHardCode reviewStripe styleCode reviewStripe styleHard25 minEmail template renders user-supplied bodyHardCode reviewCode reviewHard28 minAlgorithm confusion in JWT verificationHardCode reviewStripe styleCode reviewStripe styleHard28 minPrefix matching bypasses key validationHardCode reviewStripe styleCode reviewStripe styleHard22 minRelease workflow on pull_request_targetHardCode reviewGoogle styleCode reviewGoogle styleHard20 min