Mobile API

SQL Injection

src/controllers/auth.js:42

Cross-Site Scripting (XSS)

src/views/search.jsx:28

Insecure Direct Object Reference

src/routes/profile.js:15

Insecure Cryptographic Storage

src/services/auth-service.js:78

Missing CSRF Protection

src/views/profile-edit.jsx:52