OWASP API Security Top 10 (2023) with vulnerable code, working fixes and tests in Node.js: BOLA, auth, rate limits, SSRF and ...
Mythos AI found a critical Rejetto HFS flaw enabling admin-session forgery and arbitrary code execution via predictable Math.random() keys.