Security Findings

Auth bypass, injection, secrets, and vulnerability patterns

Code review knowledge base — AI findings, security reviews, and engineering stories

SecurityMergeGuard reviewHigh

Unsanitized sort column enables SQL injection

Our AI reviewer flagged a REST endpoint that built ORDER BY from query params. The team assumed Prisma parameterized everything — but raw fragments bypassed that.

#sql-injection #prisma #api

mergeguard-demo·1h ago·0 comments