64 items
Sensitive Data in Logs
Code QuizPath Traversal Flaw
Code QuizDebug Mode Enabled
Code QuizInsecure Deserialization
Code QuizOutdated Vulnerable Dependency
Code QuizCSRF Vulnerability
Code QuizInsecure Direct Object Reference
Code QuizCommand Injection Risk
Code QuizWeak Password Storage
Code QuizMissing Authorization Check
Code QuizHardcoded Secret
Code QuizFind the XSS Flaw
Code QuizSpot the SQL Injection
Code QuizMissing Input Validation
Code QuizInformation Leak in Errors
Code QuizInsecure Design
Slides / VideoInjection & SQL Injection Basics
Slides / VideoCross-Site Scripting (XSS)
FlashcardVulnerable and Outdated Components
FlashcardServer-Side Request Forgery (SSRF)
FlashcardCommand Injection
FlashcardBroken Access Control
FlashcardLogging and Monitoring Failures
FlashcardAuthentication Failures
FlashcardBroken Session Management
FlashcardInsecure Direct Object References
FlashcardClickjacking
FlashcardSoftware and Data Integrity Failures
FlashcardCross-Site Request Forgery (CSRF)
FlashcardSensitive Data Exposure
FlashcardWeak or Default Passwords
FlashcardInjection
FlashcardInsecure Design
FlashcardSecurity Misconfiguration
FlashcardCryptographic Failures
FlashcardSQL Injection
FlashcardCryptographic Failures Explained
Slides / VideoBroken Access Control
Slides / VideoWhat Is the OWASP Top 10?
Slides / VideoWhat Is Application Security
Slides / VideoBasic Security Mitigation Principles
Slides / VideoCross-Site Request Forgery (CSRF) Basics
Slides / VideoCross-Site Scripting (XSS) Basics
Slides / VideoServer-Side Request Forgery (SSRF)
Slides / VideoSecurity Logging and Monitoring Failures
Slides / VideoSecurity Misconfiguration
QuizCryptographic Failures
QuizCross-Site Scripting (XSS)
QuizServer-Side Request Forgery
QuizAuthentication Failures
QuizSQL Injection Defense
QuizBroken Access Control Basics
QuizCommand Injection
QuizLogging and Monitoring Failures
QuizData Integrity Failures
QuizInsecure Direct Object References
QuizCross-Site Request Forgery
QuizInsecure Design
QuizOutdated Components Risk
QuizInjection Fundamentals
QuizSoftware and Data Integrity Failures
Slides / VideoIdentification and Authentication Failures
Slides / VideoVulnerable and Outdated Components
Slides / VideoSecurity Misconfiguration
Slides / VideoOutdated Vulnerable Dependency
Recognize the risk of pinning a dependency version with a known CVE.
{
"name": "my-app",
"dependencies": {
"lodash": "4.17.4",
"express": "^4.18.2"
}
}What is the security concern in this dependency file?