Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
6 checks
- ERT-INTEGRITY-001Webhook without signature verificationCodeHigh
- ERT-INTEGRITY-002Webhook replay not preventedCodeMedium
- ERT-INTEGRITY-003Payment amount trusted from clientCodeCritical
- ERT-INTEGRITY-004Fail-open auth checksCodeHigh
- ERT-INTEGRITY-005Unhandled errors on malformed inputActiveMedium
- ERT-INTEGRITY-006eval or insecure deserialization of inputCodeCritical