marketing-site-vm-82

Insecure deserialization in message queue consumer

Hardcoded AWS access key in source

JWT signed with weak HS256 secret

Missing CSP header on auth pages

Insecure deserialization in message queue consumer

Container running as root

SQL Injection in user-input handler

Hardcoded AWS access key in source

Path traversal in file download endpoint

Race condition in payment idempotency

Terraform module pins old AMI with CVEs

Path traversal in file download endpoint

Insecure deserialization in message queue consumer

JWT signed with weak HS256 secret

Hardcoded AWS access key in source

Path traversal in file download endpoint