DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse
coridev profile

OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse

#security #ai #appsec #cybersecurity
1
Comments
3 min read
FastAPI accepts a response_model on streaming routes and silently ignores it
pachilo profile

FastAPI accepts a response_model on streaming routes and silently ignores it

#fastapi #ai #programming #appsec
Comments
5 min read
A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.
coridev profile

A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.

#security #ai #llm #appsec
1
Comments
3 min read
The one they fixed
pachilo profile

The one they fixed

#ai #programming #fastapi #appsec
Comments
4 min read
FastAPI prints the contents of Pydantic's Secret[T]
pachilo profile

FastAPI prints the contents of Pydantic's Secret[T]

#fastapi #ai #programming #appsec
Comments
6 min read
Five findings in FastAPI, and what happened when I reported them
pachilo profile

Five findings in FastAPI, and what happened when I reported them

#fastapi #ai #programming #appsec
Comments
4 min read
Top Enterprise SCA Tools in 2026: A Developer's Comparison
alexcybersmith profile

Top Enterprise SCA Tools in 2026: A Developer's Comparison

#security #opensource #appsec #devops
Comments
11 min read
A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie
coridev profile

A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie

#security #ai #appsec #devops
1
Comments
3 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you
elwin_ernst profile

Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you

#appsec #webauthn #security #passkeys
Comments
11 min read
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
mohamed_aboelkheir profile

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

#security #appsec #codereview #cybersecurity
Comments 2
11 min read
The npm Worm That Learned to Trust Your AI Agent
coridev profile
Cor E

The npm Worm That Learned to Trust Your AI Agent

#security #ai #devops #appsec
Comments
3 min read
Your AI Scam Detector Trusts Fake Reviewers More Than You Think
coridev profile
Cor E

Your AI Scam Detector Trusts Fake Reviewers More Than You Think

#security #ai #llm #appsec
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.