Medialordofficial opened merge request !5: feat: add vulnerable web API with command injection, open redirect, insecure deserialization at GitLab AI Hackatho...

Medialordofficial
2026-03-23T19:04:53Z

Security Testing — Vulnerable Web API

This MR introduces examples/vulnerable_web_api.py containing 5 intentional security vulnerabilities for ShieldFlow to detect and remediate:

# | Vulnerability | CWE | Severity
1 | Command Injection | CWE-78 | Critical
2 | Open Redirect | CWE-601 | High
3 | Insecure Deserialization | CWE-502 | Critical
4 | Missing Authentication | CWE-306 | Critical
5 | Information Exposure | CWE-200 | High

Purpose

Trigger ShieldFlow's autonomous remediation pipeline to demonstrate detection and fixing of a different set of vulnerability types than MR !4 (which covered SQL Injection, XSS, Path Traversal, and Hardcoded Secrets).

@ai-shieldflow-gitlab-ai-hackathon Please scan and remediate this MR.