Broken Access Control Broken Authentication Cross-Site Scripting (XSS) Cryptographic Failures Injection Insecure Design Logging & Monitoring Failures Security Misconfiguration SSRF Vulnerable Components