DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix

🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix

Comments
9 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027

Top 5 Qualys Alternatives for Vulnerability Management in 2027

Comments
12 min read
The AI Security Stories Are Boring Now, and That's the Point

The AI Security Stories Are Boring Now, and That's the Point

2
Comments
3 min read
Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch

Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch

2
Comments
5 min read
📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

Comments
10 min read
The AI endpoint that charges you money when somebody abuses it

The AI endpoint that charges you money when somebody abuses it

Comments 1
5 min read
Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist

Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist

Comments
10 min read
🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

Comments
8 min read
Threat modeling a feature in 20 minutes

Threat modeling a feature in 20 minutes

Comments
1 min read
A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

3
Comments 1
5 min read
Notes from triaging forty SSRF reports

Notes from triaging forty SSRF reports

Comments
1 min read
Find the Vulnerability Hiding Between the Features

Find the Vulnerability Hiding Between the Features

Comments
4 min read
Railway October 2026 Incident: Treat Every Environment Variable as Exposed

Railway October 2026 Incident: Treat Every Environment Variable as Exposed

1
Comments
2 min read
JANISSARY 7.3.0: F1 0.921, reproducible in one command

JANISSARY 7.3.0: F1 0.921, reproducible in one command

Comments
3 min read
Responding to php2shell When You Don't Know Your Secrets

Responding to php2shell When You Don't Know Your Secrets

1
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.