wallet-rds-89

Missing CSP header on auth pages

Open Redis without auth

Missing rate limiting on /login

Race condition in payment idempotency

Cross-site Scripting in profile renderer

Insecure deserialization in message queue consumer

S3 bucket publicly readable

Open Redis without auth

Unencrypted RDS snapshot

S3 bucket publicly readable

S3 bucket publicly readable

SSRF in webhook fetcher

Missing CSP header on auth pages

Hardcoded AWS access key in source

Cross-site Scripting in profile renderer

Unencrypted RDS snapshot

Dependency confusion risk on internal package

Race condition in payment idempotency

Path traversal in file download endpoint

Path traversal in file download endpoint

Open Redis without auth

IAM role with wildcard permissions

Open Redis without auth

Path traversal in file download endpoint

Terraform module pins old AMI with CVEs

Dependency confusion risk on internal package