vault-service-3

Unencrypted RDS snapshot

Unencrypted RDS snapshot

Dependency confusion risk on internal package

Container running as root

Cross-site Scripting in profile renderer

Terraform module pins old AMI with CVEs

S3 bucket publicly readable

Outdated lodash with prototype pollution

Dependency confusion risk on internal package

JWT signed with weak HS256 secret

Cross-site Scripting in profile renderer

S3 bucket publicly readable

Container running as root

Insecure deserialization in message queue consumer

Path traversal in file download endpoint

SSRF in webhook fetcher

Missing rate limiting on /login

Path traversal in file download endpoint

Race condition in payment idempotency

Hardcoded AWS access key in source

Container running as root

S3 bucket publicly readable