A01:2021 - Broken Access Control
Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information d…
A02:2021 - Cryptographic Failures
Failures related to cryptography which often lead to sensitive data exposure. This includes the use of weak or broken cryptographic algorithms, improp…
A03:2021 - Injection
Injection flaws occur when an application sends untrusted data to an interpreter as part of a command or query. This includes SQL injection, NoSQL inj…
A04:2021 - Insecure Design
Insecure design refers to risks related to flaws in the design and architecture of an application, as distinguished from implementation bugs. This inc…
A05:2021 - Security Misconfiguration
Security misconfiguration is the most common issue in application security. This includes insecure default configurations, incomplete configurations, …
A06:2021 - Vulnerable and Outdated Components
Applications that use components with known vulnerabilities may undermine application defenses and enable various attacks. This includes outdated libr…
A07:2021 - Identification and Authentication Failures
Confirmation of the user’s identity, authentication, and session management is critical to protect against authentication-related attacks. This includ…
A08:2021 - Software and Data Integrity Failures
Software and data integrity failures relate to code and infrastructure that does not protect against integrity violations. This includes insecure dese…
A09:2021 - Security Logging and Monitoring Failures
Without logging and monitoring, breaches cannot be detected. Insufficient logging, detection, monitoring, and active response allows attackers to furt…
A10:2021 - Server-Side Request Forgery (SSRF)
SSRF flaws occur when a web application fetches a remote resource without validating the user-supplied URL. This allows attackers to force the applica…
Language Coverage
CodeAnt AI detects application security vulnerabilities in the following languages and frameworks:Python
Django, Flask, FastAPI
Java
Spring, Struts, Servlets
JavaScript
Node.js, Express, React
TypeScript
Angular, NestJS, Next.js
Go
Gorilla, net/http, Gin
C#
.NET, ASP.NET, Razor
Ruby
Rails, Sinatra
PHP
Laravel, Symfony, WordPress
Kotlin
Android, Ktor, Spring
Swift
iOS, macOS, Server-side
Rust
Actix, Rocket, Tokio
C / C++
System-level security
Scala
Play, Akka, Spark
Elixir
Phoenix, Plug
Terraform
AWS, Azure, GCP
Dockerfile
Container security