Researcher finds 13 vulnerabilities in OWASP Juice Shop, files zero issues — intentionally

·1 views

A security researcher identified 13 vulnerabilities in OWASP Juice Shop v20.2.0, including SQL injection, eval misuse, wildcard CORS, and a hardcoded JWT RSA key, mapped against ASVS requirements with exact file locations. An additional 11 findings were catalogued in WebGoat under similar categories. Despite the volume and specificity of findings, the researcher deliberately chose not to file any issues against either project. Both Juice Shop and WebGoat are intentionally insecure applications maintained by OWASP as training labs, meaning their vulnerabilities are features, not gaps. The researcher argues that submitting findings against purpose-built vulnerable apps conflates volume with value, and that the real skill is knowing which findings warrant action in production codebases.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

LLM Load Testing Can Cost Thousands With No Native Test Mode From Providers

Engineering teams building on LLM APIs face steep costs when running load tests, as every call to a live endpoint consumes real compute and burns real budget. A scenario with 1,000 concurrent users making three LLM calls each can generate 1.8 million API calls in just 10 minutes, resulting in bills that are hard to justify internally. The problem worsens with tool-augmented calls — web search tools can inject 30,000 to 40,000 extra tokens per call, often doubling actual costs versus initial estimates. No major LLM provider currently offers a native test mode that exercises the HTTP stack without running inference, leaving teams to rely on imperfect workarounds. Common alternatives include local proxy stubs and recorded traffic replay, each offering cost savings but failing to fully replicate real provider behavior such as rate limiting.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How AI Agents Scale from $5.70 Prototypes to Production-Grade Systems

Building reliable AI agents requires architectural decisions that hold up under real-world load, not just weekend hackathon demos. Engineers working under tight cost constraints — as low as $5.70 per month — are often forced to adopt disciplined patterns early, such as stateless design and aggressive caching. Stateless agents, where all context is passed per request, scale linearly and limit failure to individual requests rather than entire sessions. Intelligent caching of queries and tool results can cut API costs by 70–90%, making it a core architectural choice rather than an afterthought. As usage grows from dozens to millions of requests, systematic error handling, observability, and circuit breakers become essential to prevent cascading failures across dependent services.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Inverse Problems in Machine Learning Are Fundamentally Harder to Solve

In machine learning, most models follow a forward direction — taking an input and predicting an output — but inverse problems reverse this by inferring possible inputs from an observed result. Unlike forward problems, inverse inference is inherently ambiguous because a single observation can be consistent with multiple underlying causes. This means the goal is not to reverse a function but to reason over a distribution of plausible solutions. Common examples include reconstructing high-resolution images from low-resolution ones, inferring full images from partial data, and colorizing grayscale images. This structure links inverse problems closely to conditional generative modeling, where an observation acts as a condition and the model must generate data consistent with it.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Common File Formats Like JSON, CSV, and YAML Pose Prompt Injection Risks for AI Agents

Security researchers and published CVEs from 2025 have confirmed that standard data formats such as JSON, CSV, and YAML offer no protection against prompt injection attacks targeting AI coding agents. Because large language models process decoded string values rather than raw format structures, malicious instructions embedded in data fields are indistinguishable from legitimate content. Tools including GitHub Copilot, Cursor, and Microsoft 365 Copilot have been found vulnerable, with the AIShellJack framework reporting attack success rates of 41–84% against models like GPT-4o and Claude 3.5 via config file injection. YAML's multiline string support presents an additional risk, as embedded newlines can create false system-message boundaries within the LLM context. Detection rules for structured data injection have been adopted by Microsoft AGT, Cisco AI Defense, and OWASP, and the attack class is now formally catalogued under OWASP LLM01:2025.

0 comments Read more at DEV Community