vault-vm-92

Log4Shell vulnerable dependency

IAM role with wildcard permissions

Excessive Kubernetes RBAC privileges

Insecure deserialization in message queue consumer

Terraform module pins old AMI with CVEs

S3 bucket publicly readable

Missing rate limiting on /login

Container running as root

JWT signed with weak HS256 secret

Unencrypted RDS snapshot

Insecure deserialization in message queue consumer

Terraform module pins old AMI with CVEs

Cross-site Scripting in profile renderer

Path traversal in file download endpoint

Race condition in payment idempotency

Race condition in payment idempotency

Missing rate limiting on /login

Missing CSP header on auth pages

S3 bucket publicly readable

Race condition in payment idempotency